{ "Event": { "published": true, "date": "2024-09-20", "threat_level_id": 2, "info": "URLhaus IOCs for 2024-09-20", "timestamp": 1726876992, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "a438d840-955b-4266-9bfb-63ecb9606487", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1726790466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790466, "uuid": "dabc9fbc-784c-4ce0-b112-83bbbfa1b6ec", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790466, "uuid": "56add981-7266-4e75-a03b-9bc3a590418b", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790466, "uuid": "e48aebfb-d60c-4c19-8f71-ffe17b26b216", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790466, "uuid": "dfa740b4-c8af-4868-bd7c-52613ea78e2a", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726790466, "uuid": "8289d170-0a8b-453c-a895-b9e3d7d158e6", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1726790586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790586, "uuid": "6a397a34-2d6a-4d80-8011-92aa8ff03050", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790586, "uuid": "bd825be2-6c41-47ea-93a3-24463c4f67a4", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790586, "uuid": "ce8f9678-1f31-44d1-9fe8-6e68d9ee1969", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790586, "uuid": "de0f6130-5869-4d98-b8b8-e52e2eabaac1", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726790586, "uuid": "0ea85e24-b40d-46d1-8e84-301b75bb95b0", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1726790587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790587, "uuid": "69136c3a-1b76-478b-a935-3e946d76dd59", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790587, "uuid": "921a6270-bf12-4d6f-9185-e7697534d2af", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790587, "uuid": "a18829fd-44b1-45f1-abd8-92563d5bd265", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790587, "uuid": "4dc58393-0eaa-45aa-8e56-57e3eb7b0794", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726790587, "uuid": "cf56e61f-45b5-497b-b6db-71be006a51eb", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1726791785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791785, "uuid": "d3b6a951-9ba0-411f-979e-bd9a7b7b5305", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791785, "uuid": "53bba0df-6593-473a-b7ed-36898f86d51f", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791785, "uuid": "d15e4c3b-0343-4a70-882d-30baf69cda62", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791785, "uuid": "f5642435-5624-4ed5-9a5d-96faf7c3029f", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726791785, "uuid": "ccd92b12-3bd5-42ae-b4ba-cfa7526fde06", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8556107-76e7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726792334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792334, "uuid": "2c9c28e0-e948-4bdf-9011-6585f6e350ef", "comment": "Malware payload", "value": "648df49c84f46b8ce19dec984fbc1965", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792334, "uuid": "9bcd8e6a-185c-4165-93f2-c3cc104162b1", "comment": "Malware payload", "value": "7059c3e07b6469ddfeaf028df7d8dd499d5c888ef7244819c5c2ef9087e0b164", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792334, "uuid": "e77115c8-858c-43de-8740-562ec8860fe7", "value": "T16595336106D36DCCD9EA04B1D76B2B9F19716FF680C906250982D36BAC43AFD7063B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792334, "uuid": "c0c5bf95-2c6f-4954-850e-41aab1796ff6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792334, "uuid": "8af59582-8cdc-4891-a437-6b76a1b607c5", "value": "49152:M3/2k97dSJw/VSabv8Bgmg8CASQAR4jo4tFOc:M3/79h8w0avmS7ojtFV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726792334, "uuid": "9f1eb5c6-20fe-40ab-9f99-55b0c9228e7f", "value": 1884672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792334, "uuid": "230b89fb-1f80-4abd-a458-6aa2e848496e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51f47742-76e8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726792565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792565, "uuid": "f78aefc3-5f27-4bac-a5b3-e9bdd94afb2e", "comment": "Malware payload", "value": "7ee5fd9d304831f5c6862c705f3bc489", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792565, "uuid": "cf24de06-88dc-45bf-8ab3-b8c9c0210d22", "comment": "Malware payload", "value": "79f55e512650a285ebf179fa0c39eafac956174dc28518fa4280ce765cdea0dd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792565, "uuid": "28bb6332-c138-4b46-beae-a613969bb6ff", "value": "T16754139407E8B81DFDD78E7025E1C57B0672D760E8C140D9222BE131EB467253AFFA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792565, "uuid": "89ba8343-f705-4c8b-83e7-c9a3680e8a08", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792565, "uuid": "967a23c6-cb0a-4450-a635-29f70025833a", "value": "6144:qH08ktuJISF2DYAs61NlSf0huSAkhpZvwO06BvZ57FQEO:qU8wuXF2DYAHne00dMZvwQBneEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726792565, "uuid": "b9c7f03c-0187-48f3-a023-63353ba0c3c4", "value": 299936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792565, "uuid": "9563bcf2-b345-4470-ab01-3e0b37996cf9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59ef125b-76ed-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726794725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794725, "uuid": "d1fbf892-da57-47fc-b036-83f9d6b50a29", "comment": "Malware payload", "value": "fb6bf93e755a20d0716e955ecd202169", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794725, "uuid": "cda6f1cb-0486-4550-867e-07a3d7f24ebc", "comment": "Malware payload", "value": "e9578bcbe3efcb39142806c3a112eb997c37aa3bc75c7a5946dffb06f8431f97", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794725, "uuid": "cdea5256-8753-4bcb-bf32-0a806f4e8c1f", "value": "T1D1E3E81A7A118F6DF39AC23547F79E31566436D22BE2C045E17CEB102F6038A685FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794725, "uuid": "bb831341-3edd-4870-bec7-ce773bba1637", "value": "3072:hPe4Q4LAn9VSqEm3CjzpuP4pJsUQXXwbZnr0PV3dG:hw4LAn9V93CjzYVXwRrI3dG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726794725, "uuid": "b3287d71-c5cf-43ca-bfac-3e3baf3c0964", "value": 152503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794725, "uuid": "97f26a6b-e3fc-44bf-abf7-58af62f1fdac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794725, "uuid": "472bcb16-717b-4703-872b-75ae383da85b", "value": "t14221e07157315625ad71dc94d8ee97b2152c93135348ef33de36848c281a09eea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59f2d086-76ed-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726794726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794726, "uuid": "4a34bc81-c47b-48fe-b66d-bc6cb82a3672", "comment": "Malware payload", "value": "8077b3988479fd295b67487d782e5333", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794726, "uuid": "efb88bf5-0381-4238-b549-fffab744c37c", "comment": "Malware payload", "value": "452bd9e41523e2bd9445792245ece7199b58ee26dfe428fe35731a2ff076de42", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794726, "uuid": "adbb3d1e-37aa-4782-90bb-2fabdb482b0e", "value": "T1F7933945F8818E22C6D557BBFA2E018C332113E8D2EA7217DD256F6173CB92B0E779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794726, "uuid": "343af26e-a461-4991-86c8-cf2668de4e44", "value": "1536:+byg+PSjIkrziDQX7GkR23z0PnwZuuvGlVWbZk5fOGFMBmIhlBKdGQSv5wbZnI:2yisaRLGJjsnw8uv+W9iWGFMBvhlBKMH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726794726, "uuid": "f466c058-fd37-4b48-84df-6e01301bdef2", "value": 92796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794726, "uuid": "3a0da41d-8ebf-4aa4-94bb-046708c233e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794726, "uuid": "2b38cfef-a574-40ee-8b25-bace9f5a35c3", "value": "t10231ccbe9ba11acc6fe4eb8087ce511d8fac34ba170114aac54c5b4ec55b1c1b02d8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a14cb30-76ed-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726794726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794726, "uuid": "0ac80c00-d4e6-45f2-a6d0-d24a187d6c9d", "comment": "Malware payload", "value": "f0b66fb059a0ee9acef06420a8fcf505", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794726, "uuid": "6b5eca28-4236-408b-bd51-10d43b1ab861", "comment": "Malware payload", "value": "52d93431a677ead6c8ad5ab4bc5a912ecb39a17e82f4d78b655fcc16e6741b5b", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794726, "uuid": "98872ba6-f593-4f03-b21c-12263cfc933c", "value": "T126930817B2C148FDC04AD0344A6EB539F822B9BC1379B6AB2BD0BF325C5ED210E59D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794726, "uuid": "eb568db0-ffb5-41c0-a54d-223a8668afec", "value": "1536:Pu9xvdDK6oO8+ZjO8o/yZBUORMUDhmoBVVHyVCLCfXJM9HoUXEkTQv3P4QwDmt5N:Pu9xvdDK6ot+Zjto/6BlRMUhmUVsMLb2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726794726, "uuid": "0b65a547-2ce5-4297-8aeb-5517e6f161ce", "value": 94000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794726, "uuid": "338878fd-64b0-4176-a92e-9afe50930943", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794726, "uuid": "83b8e585-b51a-47c6-a990-f7e88be5e40e", "value": "t15a2121353a8a2874a0ffaa317252e9951c112d9029f07ae2ee72f9f3ef07b840d145", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18aa39a-76f1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726796644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796644, "uuid": "18fe7d14-95f8-4926-ada9-116d0925a337", "comment": "Malware payload", "value": "82661ca16a1713263f9a11beaf43efee", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796644, "uuid": "ecfed821-fba0-4d62-9d14-e8df10e08677", "comment": "Malware payload", "value": "f57e57207b27642e6f3e82bc44aa4079f8a1357a8a86341cace885af9cbaf4e6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796644, "uuid": "ade66127-baab-4d37-af5a-3b24f2d14286", "value": "T16154121699E4BC62EF5B1FF63CA9D131FA509AF0B54280C3219FC1751A87381BBA41", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796644, "uuid": "15f7b877-5f5a-426e-b042-4d435e6d3f99", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796644, "uuid": "02e51ada-1463-47e4-8342-742dd6556b65", "value": "6144:J+kSx0+OvgVz6/MtajJ4i34rnJMJkBccaJntC8OmkwDDAI7F3EO:LSxJsgg/PjJ4b7JwkBvaJnQTwDDAI7dt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726796644, "uuid": "1f69ffb4-e3fa-4c94-b0c6-80b2def53881", "value": 299936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796644, "uuid": "a200802c-b9a3-462d-a616-a0ec93cdd788", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b914cfa5-76f3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726797462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797462, "uuid": "bf7426c0-b773-4e50-85fa-3f46005ad4e8", "comment": "Malware payload", "value": "6af4ffdcc8c2deaad7dfe0e705ee2cb8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797462, "uuid": "304df563-e82b-47eb-866b-1252822ec71f", "comment": "Malware payload", "value": "4751bdad807046b2b140384667ff314da88cb23659b25ad6552efddc98e58127", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797462, "uuid": "63e0449c-e298-40ea-9bf6-a6adf778470b", "value": "T11544E142BBF1FC77DABA06346C74C5A0567BBC526A34624B72543A6F2E723C14EA07", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797462, "uuid": "81008a29-c164-4f77-b4fd-decb7a3d4c0e", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797462, "uuid": "d0dff426-f176-413c-974b-f3616db0cf5c", "value": "6144:gDNrYz2MkCfPQS7qCIqtvcYfkXSr0RnXUZ11NYK+dF9FH1hIR:gh5MkCXQcIq2YwSWUj1NYKCF90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726797462, "uuid": "5735562c-a0ea-4e76-b08e-a380921941c0", "value": 278016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797462, "uuid": "5a436a55-ca85-4ece-9902-8137aeec7604", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1726799250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799250, "uuid": "ae7d2b2e-7dd0-4e6e-a2a1-b4ffb6987ec2", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799250, "uuid": "2617f311-2b49-40e5-8df8-3d695e4a91b8", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799250, "uuid": "20257eb3-be0e-41cb-960d-73e5389d4a0e", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799250, "uuid": "30c523d8-0b1a-48cf-904c-34f6df0de48d", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726799250, "uuid": "1a922ffc-eee2-4f43-9bb2-1fc6689c2961", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d26baf6-76f8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726799321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799321, "uuid": "ed18c6ed-9bfd-41db-b7d3-c4dba0834751", "comment": "Malware payload", "value": "3817316c8ffcae4c9669b7260f6a2aa1", "object_relation": "md5", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799321, "uuid": "bb4cdcb5-df08-4448-8663-eef6bffec16c", "comment": "Malware payload", "value": "96c1200f4f521783bb60052abff967339aea23239c47fc2512442ac5dd147bef", "object_relation": "sha256", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799321, "uuid": "accb6208-5971-49c8-91f8-cd3a52fb8b98", "value": "T1015192C4B25152FABCDAD9A7FABD8588B4C295C198D02FC593DCBCE9C84CF1C31806", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799321, "uuid": "1e84c6b1-deee-4f24-93d0-a19e2f4be3cb", "value": "48:vVZXQt37YbS/mmLwzl1/21RHQ1UNTNDNb:vVZXQt37YbS/mBzl1/21RHQ1UNTNDNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726799321, "uuid": "9a7e21ca-31ad-49cd-badc-9e45bc5d0ec0", "value": 2715, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799321, "uuid": "9c361b74-8115-4863-9448-345981aaa9fb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14723485-76f8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726799333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799333, "uuid": "8bfa3b6f-c69b-41b8-a584-7b4de6cb7052", "comment": "Malware payload", "value": "6c1b29aea1548a044f95fc6876a78e0a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799333, "uuid": "be2f9a2b-f405-4bad-9cf9-11fe442afa17", "comment": "Malware payload", "value": "820b6a2392bcf48f11b927bfdadf1e045c98cd3fbb4ab66773fdca14f17e257b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799333, "uuid": "a7d847d1-8541-44dd-a45c-148450ae91c5", "value": "T1FD9533D79B117333D7DD0278429FDCE6AF80A258191C2194990FE92DDF2BEB61E142", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799333, "uuid": "b77aba74-4fe5-4e94-b99f-a1a6c51cec8a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799333, "uuid": "32f2eb24-9f3f-4a03-b1cf-2e4eec771505", "value": "49152:RRaNoSwS8ubgN9kztm1Ru2hMgDk84JYnwhsJuxI:RgmfSQkRm2r04awhAGI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726799333, "uuid": "2728ea55-0208-4a81-a052-ca584620dfd7", "value": 1901568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799333, "uuid": "27e827a2-3157-4a31-82ef-bdd54db680ec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58eece81-76f9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726799878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799878, "uuid": "f0a8dfad-aa49-4c17-b701-4fb6bbc0b467", "comment": "Malware payload", "value": "85af84b7d0460d0f187c798b242d377a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799878, "uuid": "35506e4a-2145-4cc3-a504-f8fd4f4fca2b", "comment": "Malware payload", "value": "c0446711e10b2aea02e82e8e633462dada8ef7da252e8a9017bbe75ad8e1b5e0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799878, "uuid": "94ba98a0-5904-4561-bdc9-cc0ccb56673c", "value": "T1E744E03162A1EC36E6E30E305D3497AC1D7B7D536674808F268C37DB293A39265A03", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799878, "uuid": "1982a579-8432-4487-a64e-7a34d737f1bc", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799878, "uuid": "bd6dd571-f685-4d5d-9995-75ddcf7a9edb", "value": "6144:/DNno2uvzrgXxTLwcZ3HrznS0RDJNKsK89LBhhw:/BsvzrgRfZ3qoDzKQA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726799878, "uuid": "b029ca84-46ed-43e5-9ea1-438bad864410", "value": 276480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799878, "uuid": "7d6dedb8-8b38-4c53-8012-3c84e1ead64d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e97cbf2b-76f9-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1726800120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800120, "uuid": "e5e506fc-6ab4-4f6c-9ece-053df815d512", "comment": "Malware payload (GCleaner)", "value": "79881710a5eb97a0fd6e29aa84e613d4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800120, "uuid": "973f03a3-bc19-484e-b16f-918aeee26636", "comment": "Malware payload (GCleaner)", "value": "1f09aa615da3586cce49f0e38301ce840fde554e1986687e620d989cb448ee02", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800120, "uuid": "cd2f99e8-aac5-48c2-915f-f3fc63e2ecb2", "value": "T17F44E0003AE6D82EE2E246348474D6E46A3BBC935571859B33542B8E3D727C15A6CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800120, "uuid": "cd503d0d-e501-42ec-9c7f-bf5418a4eb17", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800120, "uuid": "c3b6276b-6387-4553-915c-f233a0d76c5f", "value": "6144:aDNFoumMdsU4ByJB7vMK0XOdmjkAi/FIvj+PDQ1:avsostipvLmYpIbAQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726800120, "uuid": "bb50a7fd-9fbb-4906-a759-7c1cea88f66d", "value": 276480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800120, "uuid": "b6b781e4-a0c1-45a2-a752-4738c7b2b28e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c291be21-76fa-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726800485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800485, "uuid": "14e26b2a-b7e0-45b4-8174-b980e965bce3", "comment": "Malware payload", "value": "1bafca4c50ccbe3ade64a57df3df4685", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800485, "uuid": "f12c09dc-e23c-4c2d-9f0d-0b74076f64ca", "comment": "Malware payload", "value": "68b19726dd34fd170472a89512a60992672b797cea8301f49c354aa5ba475e16", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800485, "uuid": "5923e68f-2d5c-4b44-b7f5-f1654beaf019", "value": "T1A0237CC0A543D9F8EC150AF53173EB329B7AF07A2129EED3D794A532D841702E6472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800485, "uuid": "d540b9b5-43cb-4900-b9d1-c421c1c8536f", "value": "768:gjo8WnBsux3TUi32+4qbBYSWLRz9NnbZJYMbJoSFO+Meb4alV:gWBsux3TUiG9qbBYSWl9NPY8JoSFO+1t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726800485, "uuid": "6e055dfa-bc50-49da-8a88-893488a5c35d", "value": 45656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800485, "uuid": "5fc05969-fa9e-4feb-b53c-b553ab49250d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800485, "uuid": "acf48ab7-1091-4c0d-8f56-e97803526bc9", "value": "t150114cbb5e6104f873e8b944db1d23d61979e65304b13ba904b31dd853d25c1d07ec", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dbf9a31-76fb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726800825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800825, "uuid": "e7b93711-a943-4798-bc5e-8ffebf545c10", "comment": "Malware payload", "value": "b35d07c7e37bda4d57ca217b2b5d46ed", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800825, "uuid": "6053b2e1-05eb-40d6-8494-8e362edc7ea6", "comment": "Malware payload", "value": "bcc784926317e00082c91395e1fe181a2811047374154e92351e0bee25bb1573", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800825, "uuid": "4535f1db-ba99-4e18-93e0-a7d84bf473ed", "value": "T101E423D91B186AFF6F3492FA3B399D11C74C90C56BFC472AA90F651CD806D07A0B49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800825, "uuid": "6e9f2024-a7b1-4814-9e0f-ddc73b59ccac", "value": "12288:9zGyn22fAN2D/uZVA17Lc0CJKni1Wb6rtaBrJsxrPSvnY6OEKVL:96yn22fAhZ+1Pc5JKi1C8yJQqwEKVL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726800825, "uuid": "06ccc478-c19a-4d13-aec3-de947debde42", "value": 692327, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800825, "uuid": "81b8d366-f047-40b1-8887-93fdcec535d1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16e9a631-76fd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726801485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801485, "uuid": "1d46ec1f-0b65-4bdc-964b-95456e18e848", "comment": "Malware payload", "value": "b6c54ef47f260d715d73253a77d4ba30", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801485, "uuid": "879f7410-fa9a-4d30-91a2-bbf155c61b04", "comment": "Malware payload", "value": "b9c1a7636ef48d6eb7e50fe8a9fe814717f5424fbcec9da8b722e402190fbf43", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801485, "uuid": "91ce0d81-b631-4e8e-ad3e-c981c483436a", "value": "T1271833F4FC498FD1D8C092B1E7A186356A01881CD2144C1AE5BDBB23569FF97342BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801485, "uuid": "0d561b12-55cf-4cfc-96c6-7c607f3767c4", "value": "1572864:+NIPm8mDzL9cGtmTEKXDUpHaK1Bmztnginqjenhj0FHpl+mqZ3W:S1FDzL9HkTEKc2aiqinh6Hmnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726801485, "uuid": "3b92451c-7df7-4733-9ef7-c80eb306ab92", "value": 85116728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801485, "uuid": "b1ff2198-98dc-4142-ae41-fe70c4c92cd5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a82df8-76fd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726801696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801696, "uuid": "ef3f05e3-227b-43b0-9409-ff9f783979f1", "comment": "Malware payload", "value": "945535d4fbdbb8a83685229800796338", "object_relation": "md5", "Tag": [ { "name": "csv", "colour": "#56b72e", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801696, "uuid": "f28fd741-e45f-45c2-b01c-c3bb9329884e", "comment": "Malware payload", "value": "1ed15565ce6bcf30a4af68d0d21a3d31d1be82c39bf17efb67dff7d880eb5161", "object_relation": "sha256", "Tag": [ { "name": "csv", "colour": "#56b72e", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801696, "uuid": "1a954336-a3bc-48e1-9a1b-ebebeac22505", "value": "T1F5228AECE36AE60E7114F2A32FE457E47335488FD44B1FC3AD54E5812079BBA62245", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801696, "uuid": "144bf765-6144-49fe-85be-28060ed7767e", "value": "96:J+8cqHe2Lg9MgYUkzxaFKyphbyCz34EpafbyorgAl10f+eg4ytRsz3Emw0qaltEx:EbAgmtsyQazyo8+jnsbkCQBL83ObE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726801696, "uuid": "4552be3a-adbb-4d55-bfb5-daf3f04d2410", "value": 9951, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801696, "uuid": "cc3af62a-0b9f-4893-ae34-fa660481244a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06ff9bcf-76fe-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726801888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801888, "uuid": "e901fd05-6036-463d-beee-a614c4494200", "comment": "Malware payload", "value": "0748cbfd7091c38e7a77a62e3273c849", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801888, "uuid": "0d2d001c-34e4-4e9d-9ca9-c37aa6e3bfbd", "comment": "Malware payload", "value": "fbab9ef78d89dc1d967bdebc010eb0aa4732dd0e855293f79c43a2323c40fc9d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801888, "uuid": "b7621b0b-8dca-45a1-948c-0b7ac8bdd7a6", "value": "T1EB44E0C161E5DC2BE7B34637D5BC9EA06A3B7D825570A58F36443A8F29322C1666C3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801888, "uuid": "5a84fc59-66ff-4f2c-88f6-ee1cbfae16cc", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801888, "uuid": "bf35560b-763f-420c-83c3-1d5a0398ca9c", "value": "6144:GDNwo2uvzrghNVuj1/E0Bre9orRKapHZj2:GGsvzrggj5xxuorfF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726801888, "uuid": "c584109c-2cee-4dc6-891d-43c9c25ab988", "value": 276480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801888, "uuid": "92d1fd2a-9b91-43ff-941e-b8e4e175bad2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41a008bc-76ff-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726802416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802416, "uuid": "943dd667-6746-41b3-94fa-0283041789e8", "comment": "Malware payload", "value": "d2ed6fd58633d465bcfcb3a598e031c0", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802416, "uuid": "4ddca018-f324-41d0-8dd2-45a0b113b489", "comment": "Malware payload", "value": "a74c30ede80c1a71886625282e5900faddadf1687b7e74c6db940b71e87ff9b9", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802416, "uuid": "7c3bf607-b0ac-4050-923e-ea16e7fdd041", "value": "T1AA242386EE41A35BA25C0C925EED36DBF06D29D0C6575DE480E07E4B4DEB4342ADE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802416, "uuid": "e0690584-fd29-4d19-abfa-f47f9034edb7", "value": "6144:iiP4O2sbO5k6zGB1xlLGwDNyPmDQG3CJbPJGojMsX:iiP4O2sbOHIXlrNN4JjMsX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726802416, "uuid": "b85d380f-f870-401c-92bb-b2518219b380", "value": 228269, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802416, "uuid": "7db21a0a-4f0c-41c1-b4df-d78467ba067d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f31661ad-7700-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726803143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803143, "uuid": "4a53be7f-a237-4f7c-83ce-2d951a42b6b3", "comment": "Malware payload", "value": "af163241d9ce7218918626f115ada098", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803143, "uuid": "4c9a4913-6832-4b9f-b3c0-f24fd1017618", "comment": "Malware payload", "value": "e429636720f0f0038c6c7592e9a5df1f4d606624b798869009957b4c8449a7fe", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803143, "uuid": "6ddb194f-3839-4725-b53b-417df3401971", "value": "T1DBD0C22A880286BF6040498DEFEDB988B60F36A9138E12186A7D42178CF8C88A0555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803143, "uuid": "998da418-ff8e-424a-8a08-3f78311f9a13", "value": "6:/VJ+eP/lCVYMIesKY3F5kJVKE6LsVKE6NiVVNDV2uVf6vY/e5:/VJ+KtCjg5sguThZ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726803143, "uuid": "9f3d9fb4-ca60-483d-b712-88075e451ff0", "value": 288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803143, "uuid": "bf138802-60e7-45c1-8871-25221f8bf051", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91f08d48-7703-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726804268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804268, "uuid": "1fc07b1b-98dc-4f09-840a-54b34bcd0c64", "comment": "Malware payload", "value": "098e15e88e5332253356c78badf8d479", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804268, "uuid": "0dd4f508-a182-4367-b768-8e13ecb5a5f2", "comment": "Malware payload", "value": "6b89cdfe0d3ebc90994ee564aac9c88b0df80f25720aedadff660a0d079ad0c9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804268, "uuid": "6e4a1f01-0442-4668-92c0-775319c1380e", "value": "T1D6E59CA17997C82FC15B0270881DC2ED7262BC329EA14947BBC4B77E5A74F43471EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804268, "uuid": "78417cc3-a74d-4c50-b190-149e36e8650a", "value": "ffb6d212ec0eddd03980d3d9bade33c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804268, "uuid": "ce720527-afb8-4279-a021-baa245188b5d", "value": "49152:PqRtSgOLEJxW+BmNlgtTTqEva2+qb6Xy3gIYvfe2radRo8ap5XAnZ2JarsW:VgaEJxlBolgtCEvZuXyQbUzozXAnZUW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726804268, "uuid": "023c9cc4-5368-41e2-8d33-2d515218acd0", "value": 3037032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804268, "uuid": "78fe3766-30e5-4ee8-9dd7-acdccb9341d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94e488be-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806850, "uuid": "c5446062-8259-4f96-9f2c-7afed2883cb3", "comment": "Malware payload", "value": "17d6fd670992ef7e14b257df88f9149e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806850, "uuid": "8062b68a-54bc-47a4-9652-da0ce7181756", "comment": "Malware payload", "value": "9d6722dd2dbf9f60c7d5d7f003211b81a85d25fd8c0b8f73448f3bbd85b8ecbe", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806850, "uuid": "ff4b936a-1e99-41a3-aa9c-98f0031d9318", "value": "T17A636CD5F400DEBCF95BEABA81164A09F92172009F620F2BA637FD936C730959D1BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806850, "uuid": "a97e8305-b7cd-4fba-ad77-aba9a9111b38", "value": "1536:RCR4THBUF0TWGFsSpNiY5OrPnoLbF2sWC/vUzmg+I0JxWdiv8sw/M:R+F0CGFXpNiYCns52WW5CWMj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806850, "uuid": "66973afc-d36f-4a82-99de-18b170c7458b", "value": 73024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806850, "uuid": "4f83bc94-1d5a-4cd5-96d0-dc271e113191", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94f472e1-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806850, "uuid": "43d49b70-143e-48ac-afb5-dc64c2a0cf5a", "comment": "Malware payload", "value": "f4ca8d8b19510b3f89fd52877ebcb744", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806850, "uuid": "326e09a5-7ad5-4ac1-aca7-4c4c2b424c4f", "comment": "Malware payload", "value": "251f259406b134d3e76138cf98f08ff429443011a5905e2a01c5573057f3c741", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806850, "uuid": "dd848df1-f977-41d5-b2a2-c789782c8f5d", "value": "T1CFD2E0B4F183AFFAFEFF6DF90DE5CBE477F14B8E16145B6221814A28203A52201516", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806850, "uuid": "da11a773-5db7-4b87-9045-b4de42299347", "value": "768:lj3rkxuMm35wTdHxIq6rS9zSI4vmN4uVcqgw0RTWXk:lT4NxIFS5SIeG4u+qgw01WXk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806850, "uuid": "613c2fad-55a5-4319-bb92-bc699164f9ac", "value": 30752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806850, "uuid": "158dd80f-a910-48b2-af10-e0ba81b4d92b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "950a7dbe-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "7920270d-e7ab-4d97-b11e-6abd5f4cf313", "comment": "Malware payload", "value": "f9954fa3a4b1ca7d8c7f51a703e3b0d3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "01867c8e-4c86-4ad4-a0b9-5d386c123a12", "comment": "Malware payload", "value": "03af513f8982ad4844b0d5a9f5ce42d3aad47c6e38bbe3228b140bcd6bb02b1d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "f1b4c431-b099-4c84-b091-44676c80cad8", "value": "T13A7319B41986F27CEDF180B9E85710D624A20A1C7BACE1E3A8C7543AEF79B0C7179D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "1f962794-07c9-498d-9b7c-56ceb4730672", "value": "1536:TUuiGsZhY81utQts8nd7/WGed6l4QaYjV7m:TU37ZhY3tQtsQ7/Wsl4QFjV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "138ddea2-5216-4e82-a2d6-ac6fe5930d8a", "value": 75132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "9177bc15-e0b1-4bf5-8e6b-e5db4d400944", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "214a19cf-5812-48b8-abd2-02e8d08b1397", "value": "t1cae02600ec6a8a6c5ccb9e749d9c07bce90162025566c710df10d7e4c83f464a319b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "951c9d69-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "53532dcc-9b43-43a5-a91e-2cfb9e26a710", "comment": "Malware payload", "value": "2bbed9216c1f3c5138f7d73d3b6dad0a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "f0ef397f-ed45-4427-b607-32ae2a10cbef", "comment": "Malware payload", "value": "c92637891f1efecef317c9184dd5af4c6def872194e70dce20bf14301f2931ba", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "428d2b8e-f255-43ff-b864-bdd44ad26075", "value": "T1136173B41077D2E41C968D17A2E9BFCC7DF0A1C516C96E1586C8B4EAA48FD03ACE0E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "24e6e1b8-d818-4b60-b977-e0a05c015bb7", "value": "24:vjUWzgGBWgx8Tx8wcDWfeje7TEWf3XTqAWfhChwTYWft9T2KBWnfWZ2WMwVxmWPC:vBdcHmwfejenVf3jwfE2BftROu5nwK0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "90e5f6ff-8d81-4d1d-baa1-4db32f52829d", "value": 3361, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "69e85073-f9c5-4c7a-beca-1a2089b27aa2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9524ada3-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "ccfad54e-9675-4e06-ada5-ac747816d278", "comment": "Malware payload", "value": "46f084d7284f8515311089df509789bf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "0932f9a8-425d-4213-b359-11d540541516", "comment": "Malware payload", "value": "6d3db77494cc9e353e33005fcfc3a86953a792cb3179689c2ee50b41d990d4ed", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "545d92f4-4210-4758-b2dd-458c33ed53a4", "value": "T18753AF72D86C6D90C6584178792A8E3C1723E904B6336EF5895E8FA6640BEECF50D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "0d561d00-fb97-486b-aa04-e46860796e35", "value": "1536:z/hYOEVx4LwtRbOSsWsYcdEri0rt8GUCShm:zJYBX4LSOoti0rt8GU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "e18c3787-0e2a-45f3-9024-9890c68a9a2c", "value": 66552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "43646be4-24b7-4d80-a57c-b3d5a85b95bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9528aeac-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "f7e9d58d-1780-48d8-b367-bbd0f30a6a57", "comment": "Malware payload", "value": "2ac335a0ac27ba517fdebe60b91a957e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "4fa4660f-dae4-426b-b47c-5e8238f208ac", "comment": "Malware payload", "value": "d8a6210d95ac850725a8c106ce208ea9b2d0cf9b5b8ff80237260783e34acb44", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "6e06d4e7-991e-4b24-970b-b8b5e471a278", "value": "T183E2F160A2464934C1BB34FAC0F0810125217E74ACF8A1A8BE7E7338FF850099EFE1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "ed79412d-d9e7-496a-be7b-0ec6e2151fef", "value": "384:2yHdKB6MghRlFwnbVlKMONadjRkgQwT+to2BBw7whbcDxMKho/AMsrAFXmKUQmdz:d9ErghRTuPjONanQwk/wsKrcF13UCq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "8b0ba314-0d0e-472c-aea3-d69d30e9bacc", "value": 31912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "26d91456-339f-4cdb-8f73-a8125bd2e321", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "14260c2b-de38-4ebb-9bcd-1c2012ba6abd", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9555b57d-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "c37bc3d5-85e7-4fcf-926b-c86b10ce5fc8", "comment": "Malware payload (Mirai)", "value": "05845cd46412b372eefb06c502d876fb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "a032c7bd-fb4c-4c8d-b8f8-fceb93046455", "comment": "Malware payload (Mirai)", "value": "525996e6bf67a735037cd9c4c9aa72b607a3b237de7388738dcd0e42742e6b18", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "383d0e35-d084-46e0-abd2-aabae3e93641", "value": "T1BDF2E09EA8583CDDC49E0D79F16C03E15C6C70C6A169B79D8B6DAC6BB3240843C4E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "eaf9137a-c62c-4fcc-a0c9-311e01ae0a8e", "value": "768:m2vTZErgtTXmuLHGGJboFkXqDx5JIwz/lwRYRMQJWMdF:m2vlEMxX7LmGOFk6rJIXmjd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "0e82b5b1-319d-4c8d-bfa4-71683e5e4059", "value": 34540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "9ecf4cd6-1d14-492a-a9b8-68f971516a99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9557555d-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "dc955a88-3559-4702-a9cd-b0ddb1ae76d0", "comment": "Malware payload", "value": "9ad11feedb480820b3d123b82c893f6f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "e716d507-2062-4e95-8f55-b60daabd63d6", "comment": "Malware payload", "value": "5e3422bbe93c563f9677b1991c254adb6f69bafff35bb46a33aa11adbdb99a72", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "616089d0-af14-4031-b562-2be3a9be1b36", "value": "T19AC2E1714594D0F6E680BCFFDADEC508A75315DCB8D570A356180BACFEDA208E6B43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "c59b6b45-a106-4118-a4e3-848f7c13a25a", "value": "768:ASktOWYa3Y8cpHLms8QLX/QIccmseNg93UZ1:lejFjCP8QTYH0eNz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "20fa0459-3c35-4e79-8692-6c130e49059e", "value": 28248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "4aba7e8e-2975-4d45-92a0-b35318c5fd87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "f0b905e3-b582-4090-b27b-c5615ce58bd7", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9561cb7a-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "79b112f5-00dc-46c5-8512-0c99951c7fed", "comment": "Malware payload", "value": "6764856ad71b33000afb5afaa0723422", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "96dcf88b-7108-4d58-9163-a0408a8646f3", "comment": "Malware payload", "value": "9501436042b15ac8412c0627173cbbacd0bed4415346de7e2243b8731b3690ab", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "b893d478-3280-45b4-ac0a-7add983a0e2f", "value": "T121E2F1AA4F974B99EEA973F380CC71155CB2796337AF9F720C55086621232D512F4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "cb1cee52-468c-4db3-a9ac-7f66dc5b244d", "value": "768:Bq3ydi2rg98FdmvPyQw7NAFkcEfchpJJLfSu3qHeFYJFkppKa:WiFdmvPgA2cEfchxLKuaHeFCCL5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "1af6666b-fe5d-4e5a-b206-7f17c9c0dbaa", "value": 31328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "7c37e160-d2b6-4660-a2e2-f3469ce48bef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "01a70cd0-5697-4e12-9e5e-7ee32f657d30", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "957b2b26-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "8f8d39f2-6a48-469d-81e6-8ee65736185f", "comment": "Malware payload", "value": "f93a8c94888e4dd8ccda4965d029b3e3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "75941992-56c9-447a-a89f-3d728a5b7e2e", "comment": "Malware payload", "value": "c8f7214f37963b1aca9887ab4de189d762c8ca28c21f7d3acf2087e6a43a24df", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "cada6315-f36b-444f-bb34-78a52c9183b4", "value": "T18B735925B97A2E13C0E4B47A52B78325B2E6234E34A8C75D7D320F8EFF156A024571", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "70d7cfc0-c93c-4bf4-ac2e-2e56a7b58b0d", "value": "1536:SvmqguSaUvgEVzTJanxO7KBi/sh7cQ2NhWJD:pvlJ9IB8a/26", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "ecac838d-6901-420f-ba62-1674598bd8ba", "value": 74760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "e08c4ce4-f049-42f3-aef7-d7942022314d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "958037b9-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726806851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "e0dfdcce-7c4b-400b-b8bd-e4641116f5a2", "comment": "Malware payload (Mirai)", "value": "5456eed0267ef81e4e1e3639377420fb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "2f24eaa7-7089-4d51-93fa-8ce985f1586d", "comment": "Malware payload (Mirai)", "value": "fc11c86720840e790c1d3b10300363d65e4000b5ff29b5389591df5302d9be7f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "7d869120-38be-4795-9a01-5664b3ae8c83", "value": "T158F2E197C55C9952FCF1BFA2589E0547A12CBBB0E2BF703477A805CEB1D2DE983A94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "6af294ef-0bed-4397-bf92-141a0c4aaa83", "value": "768:nLooWiZ44GJ74khJ7PEkDV4uGPQ94ciaBXFjf6cLGq3UINc:nLo+HG1hdMUFwQ94cvBVjf6spi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806851, "uuid": "79a5d4cb-2632-4ee1-bc7e-1f657cb7a84d", "value": 36332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "f93bd001-c624-4902-9bea-33947a02ee01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806851, "uuid": "6edd9000-a766-42c5-8388-a0beddd6f946", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "959a08f7-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload (YoungLotus)", "timestamp": 1726806852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "98723c2f-1604-4de9-a9de-e2c132eed1a6", "comment": "Malware payload (YoungLotus)", "value": "a418f80b395ed0ecf7c27d01cefa21ac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "younglotus", "colour": "#70a934", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "c92598e0-d302-4d25-8af8-8ebdcdd38119", "comment": "Malware payload (YoungLotus)", "value": "3e182874c82bbfcf6fea1fdc612f95241b56b5f2194eb2eb2f43a7516758a327", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "younglotus", "colour": "#70a934", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "cf98559c-94a7-45fe-adf8-e8652dba41a5", "value": "T118E38D963CD64B7ADCF54234D94D8A38149E86B04658E4AF873DA4BAA3703C3B0E77", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "442e8aa3-cfe8-4a2a-a2e6-75b58cf81f40", "value": "6c306e45fa9f977a2f45c8a08df084d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "51f475c7-9f66-44e8-9877-22c9accbb9a8", "value": "1536:Vua+BTv3tIO8MtM+/6jRVGIk1MgHjsPGYYwOda2CqqZOIgQJb0lfjtO+vbWL8xJb:Vn+htWMtf+7GZYGVA2QJgi8xJLDoU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806852, "uuid": "cce7a40f-893a-47b9-9c61-eb05faec1d86", "value": 143360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "665c6d6f-d1bc-4e10-ad5b-f48e3b1263ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95aeca98-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "7040c5d8-edb6-4c67-9baf-2d11a6ccba43", "comment": "Malware payload", "value": "0f056f9608b250d7b663aec1db0257f7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "d522169a-9dd4-4ff7-980d-05813fb2f7d7", "comment": "Malware payload", "value": "5533760ced0373c6a9fa98164700357f16725e4b0df2c53fe6fd0523cf851d02", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "86d59df4-d966-48d4-bf80-985483a7a88a", "value": "T103B45C42E3876CD9C92AC2BC865B5226FE30B4580375FF17AE50E2712D53ED0FE6A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "c52da5d9-c3e2-454f-9225-6fe8ba90fcb6", "value": "9c8b5a4dccd7e5cfc4d693f6fed4b26d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "15abfd20-1947-4f69-b260-6fa6f78643c2", "value": "6144:z9V/Uu9xKynBcGHDLJPw1i8aq7c4KgUuDtBklrB3t6W:z9V/UIxKGcWDLx8aqYgUuDtBknt6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806852, "uuid": "4c2b6e08-cb83-42f6-955f-d8ed4075b115", "value": 539691, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "7362c0dd-6a66-41e4-a9a9-cf603e101763", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95b338b6-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "2b1a0245-ce4a-4929-9f86-e974a7db3422", "comment": "Malware payload", "value": "8cac73b22392814a9f8f46edd561873d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "98dfce2c-ae69-4654-aded-d6b22cd90311", "comment": "Malware payload", "value": "11322a39ec6853cc2d0d9a91c7a099343e237daadc78f9d7e9734a93b0c4511a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "325d4925-4dea-4285-9a27-068b09c21cb6", "value": "T18DE2F1E235F9E83FFD1283794466ABE33400A96E61EB76D6E34E0449D5FA1423F285", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "16dc208b-bb9d-472a-9814-62d7ef531c73", "value": "768:ar7y3AWzDZU5LS4Ucgb7/LSk7hzS73zErUuxZNq9giNao2L:jHzlUhS4Uc7R7DEr5qCiNao2L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806852, "uuid": "6675db6b-44a2-48ad-8eda-b1a653d78ea7", "value": 33004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "8e63dd96-befa-4207-bda6-ad6b9b5def72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "a2837050-e588-4361-98b5-227e6af3bafe", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95c58ac8-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726806852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "769d1afc-6016-40d4-b449-5c2d63d81e18", "comment": "Malware payload (Mirai)", "value": "b0be6d777d94b828534637418e7da8f6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "b68cc2e4-a8c0-470a-a273-bb9ff28ac17c", "comment": "Malware payload (Mirai)", "value": "21417973639e54ddb14ecfc5a6dca5ee8fdd753844c2d7a8eca0ac73936264aa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "7ed8e1cf-5149-4b1b-be41-807234e9fd40", "value": "T164E2E1BC022D07B2CEA6E0B9512F279486740EF0A263C902B61AC497776DF5D6D357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "0a8725bd-e165-4c52-bd86-a755d7af97b4", "value": "768:ejZwebsQRp1kwtPNTwbCtAwVgylKjrzZ1IY0jAIOQ5kJgGlzDpUYsh:ewYsWXkS5w+1LQjJ1ajhcVqYi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806852, "uuid": "db616073-09c5-4cc4-b2cc-719c79c3d225", "value": 33272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806852, "uuid": "a12c9a1c-2bea-4a0d-99aa-8d919e3e1e42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfba7d3b-7693-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806907, "uuid": "27a30b62-770b-4489-b2d1-22d5befe35f8", "comment": "Malware payload", "value": "4225b2ad70add8281a8d8ac6e1c5d9da", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806907, "uuid": "20c2db15-1dbd-407c-ab6f-fb40137d9a19", "comment": "Malware payload", "value": "10d4e15b63a07368299f2245661d7a4626cd1a91a9950a3cbed5b4276d2dc31f", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806907, "uuid": "56740229-9d0d-4c66-a6f3-bf1f95ed8c56", "value": "T1BBD0A7BAB7199379C54057C2F81BF103F01F408DA252D54880BD604040A004283DD1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806907, "uuid": "9178445a-51c6-41bc-9e63-0052d1e10f26", "value": "3:MoLXHPtwrWzZQXOaNsHnyMvZd2AnfxHBGQaiyJG95fVvfDMaDjX6MFIwp6HBGQaA:MuhCOxBfdBGQabC5fVHL6MFIsEBGQaA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806907, "uuid": "c3f89f61-2a4a-49eb-9816-10374690136f", "value": 222, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806907, "uuid": "46147ebf-4017-4c73-8537-87e76002725f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ceaf160e-7693-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806907, "uuid": "5b6ff667-80ae-40d3-a123-9843d6b342c6", "comment": "Malware payload", "value": "fac2188e4a28a0cf32bf4417d797b0f8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806907, "uuid": "9a7dc00d-4bd5-4bad-920d-90793386e0c8", "comment": "Malware payload", "value": "d737637ee5f121d11a6f3295bf0d51b06218812b5ec04fe9ea484921e905a207", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806907, "uuid": "2f4b205d-4e24-4f85-a068-119d0b8bd0fc", "value": "T1BD7422C1E3D84C71DD2246369475027BB49CB38E8AD185F601CDE46BAF4573A82F7A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806907, "uuid": "e4c0ecda-56ee-47b0-81c6-a5975d5e0e43", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806907, "uuid": "b49f0244-8744-455c-876f-e948d830c16e", "value": "6144:HDd+O7VyIqZiQUa+I0st4nlSVbiWN6VqWeqfn3Zsz9HMiobZYK1QE:B+O5yIqxwI3tFOqWeqcYbZYzE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806907, "uuid": "633491c4-16c7-4f87-8345-1ffbd802f743", "value": 354168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806907, "uuid": "1911e40c-6509-4e13-99ab-12b580f758a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b704fe91-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "4a028f70-d66e-402b-a5b4-25c419f9bc76", "comment": "Malware payload", "value": "de544dbdbbc64437fa34fa96eb0fd589", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "bd0c273d-f6bd-46f0-836e-415610d483d9", "comment": "Malware payload", "value": "adea1fb6b1ecc276c85341656a8a8b22a09925681d3c788657a4ff45bd713607", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "0740266f-3c48-4e39-bf74-6d1f984fd485", "value": "T1BC31788D11B210743D29F8EEB1BD060CB1C1979984A2EF182DEE3BE8708CD15B061A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "ce0272a2-1c5b-4c81-8b92-4c2f7798faff", "value": "12:GHGQvGpzosSuVlYanacaJv++2wPML4Z/Q0FaMapaSByNITnz/4Klq:ZLVq49WbaiouNIrsKk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806908, "uuid": "969bb3e5-0652-41bf-93bd-344400f5be05", "value": 1756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "7ba6db52-a9bc-44d7-8f15-7d9180308c6b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7150b3f-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "a789fd82-ef23-4534-a03c-9d487c2eec36", "comment": "Malware payload", "value": "a5c4867f6e77f4f88af16037b7a7baf2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "c2df2e4f-b46b-4029-ab71-005f814b8032", "comment": "Malware payload", "value": "7e8d7de33c15a147d09e4ae40fc2c3dede5dd0df1d5772623b6cd40bc4b61064", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "5b0d7088-a881-4dde-934c-ac83465d18e3", "value": "T1ED430162425AA53AA7701C7562AF470F35BD9EF59EF837CC3B274B42086A10B4DF45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "24f07dfb-22dc-4e41-92d9-e2b55783ad33", "value": "768:34QK2VFgVJMAnl0a/afd7Ub4lchNoREu3E77zzgh4H/0q3UIKagpqKQFl6VNp2AT:s2koelfoGb3zoR67zEu/bKagMkcAT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806908, "uuid": "a4d701f0-a5c0-42af-a7c8-c5cdd940a3ab", "value": 56036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "9689ba9b-d96a-4584-a6da-a59ba472ae42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "005b053e-c05a-4b6a-bf89-afe1abb438de", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b77388a0-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "4f8f63ae-414b-473a-9e51-01b789fee64c", "comment": "Malware payload", "value": "684698dfb2389d7b5acf87356c7ae52b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "d8e581a4-29a1-4285-8419-87323fc14cb3", "comment": "Malware payload", "value": "4deb0a8c28230674b481b56387121f5d0445bdfc8b9358c7bd0786c0dc27b321", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "a616610d-399d-42d2-8701-b3978e4348ce", "value": "T1ACC34A2777260A23C0E6543541E75333BBBAC7D529B05207B6A09EEC3F1A6D03963B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "455e32be-8ced-4a4b-b5aa-2cc143f353d5", "value": "3072:EOqwW3NEI4VvL9phaH9HcIqmPwAw85YIn:tq/qvL9phaH9HBqmPwAw8CIn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806908, "uuid": "1635ed0e-3895-4e3a-b4eb-5b4f215ac94a", "value": 127170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "3a90cca2-7ed3-4741-a4a9-d9ce0a0b7d0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806908, "uuid": "fd5feaa7-f8fc-428e-bff7-80df04520f5e", "value": "t12f112113a0b9ca286bf758349dbc4bf105512b237742be71bf0ac5c49937042b979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7be8adf-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "19077ac1-e756-4320-8932-9859573987a5", "comment": "Malware payload", "value": "8a9db44468e1085f1632917ed42c4e2b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "92284978-ed41-4458-9849-11ba7332efc0", "comment": "Malware payload", "value": "dfaf524d25fe39fa37fc181401c2cefa0e2e0f1891205516ca0c02207ade8dd8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "dcab6b3f-5d6a-4bc1-8d66-569e54e5bd45", "value": "T174E3D96B7961EBFAD05DC2310BF7AF6096A521E217D09345F2ACDB185E2034E1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "00473810-c18a-4535-ad86-be681d501c57", "value": "3072:sGGNZfCos2pA4FCi5hvikTam0/5ApYADn:hACyK40i5hvi9m0/5ASADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806909, "uuid": "aec132bc-e5ab-46f5-8d14-d400ace7fd90", "value": 144442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "59badfd5-486b-4da2-82f4-e29aaa8c8e74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "7777d3eb-6e05-485e-b6f8-a1f5990b69b7", "value": "t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7dfecbb-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "8742294d-3fc4-44c0-b0bf-c84a0a3ed1ec", "comment": "Malware payload", "value": "bdeb5801a6b5f1b438e614c1a127fe6a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "394cf6c2-698c-405c-a1c7-d4751504f79f", "comment": "Malware payload", "value": "3193db1fd1a5763b455c95dae2e58924067a285d6b9b4bf433585a5acbc6aef8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "95a18474-079a-4bfb-bb4b-daa53cd4abb6", "value": "T1D7E3F907EB614DB7C84FCE3202D68525148EA5A653D56FABB278CB5CFB0798B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "c06201f1-b958-4008-bdc5-70e67820733c", "value": "3072:lBXpqf9VHGn7vsK5htpRvHpVFm0/5ApYADn:llp4WvsK5htvp7m0/5ASADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806909, "uuid": "5d88ac4f-23a1-4458-97e7-a74d19018a10", "value": 144442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "5e85c11a-d02c-4c7f-b841-a1f0c6270bcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "715bb987-1867-4c6c-b4b3-998aeae53d9f", "value": "t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7e27aa7-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "80d6d8fe-45cd-4e8a-a793-5047f62f9ab5", "comment": "Malware payload", "value": "d9045605366ded19cec754c5353f312e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "fb3e9f02-7d98-4362-b5b9-d4d45b97fe29", "comment": "Malware payload", "value": "00b090eca91c15635a20fa82caae30f0c9a7687f11ef3c70f4ab0a6a34c06159", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "0f261682-34bc-4c0f-b94d-54aa4a7fa455", "value": "T14EB32849F5048653C1D32B7ABB8B434A37226AE597DB33155638BFF03FC269A1D369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "a1ac5ab9-33c5-4695-a6cf-27ab28fcc6d9", "value": "3072:vhfviOui5FCRSUaVejY68t15hqSr3hGm0Qxu1bXWIn:pvfUQVejYXt15hqSr3hGm0Qxu1rWIn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806909, "uuid": "a34f3d94-b4fc-4c40-94ed-219624fb1523", "value": 115077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "eeea1b92-1849-465c-a55a-f577754986e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "5fd51caa-9877-40bd-96e6-fdaca182840c", "value": "t18811ce13a0baca286bf758249dbc47f105912b23b746be71bf0ac6c49537002a975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7f71d43-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "f0409bb7-2d65-410c-9763-50d3b3d7a552", "comment": "Malware payload", "value": "f6ee2d66b2b292703eff55c06c7ff72e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "347f7abb-677c-4b98-b39e-4f5f9d60fed6", "comment": "Malware payload", "value": "9b173a1d46f26abd4c9d9b967db5a4f4b9fd797da7b2e1f0324400a135d118f4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "298bcf08-32e3-4d61-9c64-a55dc0d31e05", "value": "T1C5E34C09F7408B57C0D22776B6DF524633239BA9A3DB33069524AFF43FC27A94E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "708986a9-b54b-4e2d-ab18-96f11cc8e7bc", "value": "3072:Tdbmn8aAEHqgSkano1DTAU5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTt5hWTGZWYxVldmpwTsLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806909, "uuid": "d4426f5b-fedb-475e-8b1e-a8c0f04800c1", "value": 154520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "ee84d92f-a6ea-43c3-b7bc-9fcbff57b989", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "bb64f122-93de-4652-bee9-82d66a4b0521", "value": "t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b81b797f-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "4c39343c-0e49-4cb7-896c-1e779944b0b7", "comment": "Malware payload", "value": "bf54d43367b7692e788e5c044bed9ef5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "da2db393-18d1-4b9d-93ef-1304770947db", "comment": "Malware payload", "value": "47315d3f43eacb1da2c46f82e16ac25258986e9ed6118e7d8009e3d50a53679d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "77717a05-d680-481b-81ea-1e7c87c09a8f", "value": "T134E34C09F6408B57C0D22776B6CF524633239BA9A3DB33069534AFF43FC27A94E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "0823f731-979a-436e-a0a6-4a61f5fc4772", "value": "3072:Tdbmn8aAEHqgSkano1DTAU5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTt5hWTGU2WV7ldmpwTsLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806909, "uuid": "d193a4c8-0ad0-449a-af91-1b98a1301955", "value": 154520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "2913ffb0-bbd3-4683-899a-eac7fdba1a57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806909, "uuid": "6fe5a40e-54fe-4a45-a3d1-a5e280a93878", "value": "t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d97dd753-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806965, "uuid": "647ef01a-d799-4aef-a541-805848b8e9bc", "comment": "Malware payload", "value": "a59033683ae95bef8cf450c6310f6e29", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806965, "uuid": "ee59a48e-647a-498c-b655-4ca21a1954b4", "comment": "Malware payload", "value": "597dc93c8927ab0bbfd2ed5e520f875de848bc82221b5714f957f2ca531e2b14", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806965, "uuid": "232b36a3-ca49-44df-996b-a1fd3bb34cc8", "value": "T164B35C07DA21807AC09B43B21BDF96219D23B4FD1772310B33E5AEE4AF095859F9D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806965, "uuid": "29bf185d-f08b-4649-a2d0-94ec6e230277", "value": "3072:j6dye4BmJQ9phaZw/1vc4+AzkSXmdRWaLHgb4:d9phaZchrmdRWaDgb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806965, "uuid": "daacf983-2f88-412d-a4d4-499ce430bcc8", "value": 108630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806965, "uuid": "e0f609db-7be4-4132-8c7e-cb587593b986", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806965, "uuid": "0748e10a-8acb-47e6-ad65-b57128086d4b", "value": "t1f111c213a0b9ca286bf758249dbc47f105511b237746be71bf09c5c49537002a979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d98a078b-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726806965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806965, "uuid": "2e91d7ac-9b5a-477f-8eb7-dfa437dcd122", "comment": "Malware payload", "value": "abe0c3ae9a16af9d926352fa9cf321a8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806965, "uuid": "2bc2a3b4-bd76-438a-8810-f11e56bc57db", "comment": "Malware payload", "value": "fbd97eead00ca6c0643d60677c3df68be8fc591a4a96aa81c91a257346ef348a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806965, "uuid": "bcd681ae-ba7b-4112-b344-1e6d15c20483", "value": "T148B34C03A3190F43D5CB49B02DEB27F143AAE9E112B36182A61FAF9457B37791153F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806965, "uuid": "d7dbb3d6-bf32-4a39-89ac-5b79682308d9", "value": "3072:gQiBqcL95J6qEWLE3Sr5h7wLYm7ArEfT3n:gQiBClWLf5hkEm7ArEfT3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726806965, "uuid": "c6ffce20-2920-41c8-bb7d-ebc17a6fafb3", "value": 108983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806965, "uuid": "d693507d-9573-4b19-9e45-2690c26bd4b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806965, "uuid": "cbd58303-f8d0-48a1-aa98-3001bf6f70ce", "value": "t11811e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7175ff8a-770a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726807220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807220, "uuid": "b6efd9e8-d852-41b1-a475-ca0beb7b9b78", "comment": "Malware payload", "value": "6f60cf2d11c47cc10e436450305e59f1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807220, "uuid": "0d2f7915-53a4-47cb-922f-e91bcf5a9e77", "comment": "Malware payload", "value": "00c70ef2e587b17eb7e2364a05e08facaabd590bb445ff9d5e86a6d938bc7811", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807220, "uuid": "b27a0eec-20b7-4e72-8b20-56ea13535779", "value": "T198C64A69FC6695D8C50F8B71809E9025D9380E306B18E8C7FEC26F1B76B4ED1C07E5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807220, "uuid": "6990a852-d569-4033-bbfb-bc8b36d2c175", "value": "3f436ccd3642223a3f31e0a885144c9d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807220, "uuid": "9102ba7a-b370-4cd5-841f-493837a0001f", "value": "196608:CUigvRpdR0F5TEXCFYFet9dysiHtjohq3G5WWOJLZgPj:CN4Rn2EXCFYFet9dysiHtjohq3G5WWOE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726807220, "uuid": "00408b4e-fffc-4144-8e2b-c520899eb312", "value": 11517952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807220, "uuid": "b5199457-6240-4019-9d76-eec41748912c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9a7d597-770b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726807771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807771, "uuid": "6d4b87ea-1a0d-42bb-90e8-51bf982f9ef7", "comment": "Malware payload", "value": "03867c7a0d039def73c9823fc97e87cb", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807771, "uuid": "25947dbd-3ee6-4a68-a85a-167d64aec7f0", "comment": "Malware payload", "value": "e8d10fcde107f4dc97462faeefd700beb23c634287b4d35ab5a6f0f079426f8f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807771, "uuid": "d47c35c9-4efe-4ac2-bdf2-f89d045085c0", "value": "T18026AE227490807AC66B0334991DB37A77BDA9700B3442D7ABD47E6D3DB04D3AA397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807771, "uuid": "a8ead9a9-3776-48eb-ba70-a17c622c459a", "value": "052a42c495a0aeaeca141d0e9c942b5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807771, "uuid": "11721ffd-5560-40fb-a8e3-bbf49852770a", "value": "98304:2JDV9bD55mTEbek9rEdMQWlLYzjoUzgj6CwCV1hxT5MbkOO/glN4HuQlKn:81BQyjYzjoLaiHuQl+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726807771, "uuid": "1f31b8ea-4afd-484a-9105-767058b966aa", "value": 4575232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807771, "uuid": "39b4c267-536a-487c-99fc-ef089fede727", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60ce4458-770c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726809737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809737, "uuid": "470b0b6c-b49a-4386-9122-a6c75fb03da2", "comment": "Malware payload", "value": "fe32d8967abd9602bf845bd3e7b04f5a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809737, "uuid": "d808ae51-9b7d-4791-8469-58404769f2fa", "comment": "Malware payload", "value": "bd10b255ea97050172b397a4a7fe68172d6e585e6ef37e98d16edf2796ad6c95", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809737, "uuid": "471d2642-5bb7-4105-a9db-bd7be3b8e790", "value": "T186953300AEA3C907CF44493EAAFF1B757F39A798219D13FA135D2D5A5C9612333398", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809737, "uuid": "a1f5225c-a539-4ed4-95a6-682745b9fb75", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809737, "uuid": "e62d952b-b568-4e39-8e5e-c273ef1bda9a", "value": "49152:kzkdGqQWZxD0JG9V7nCjZsmCOyH09uAo:kzkdFZZR45Xc4v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726809737, "uuid": "937e3da8-d890-444b-b856-33786dddc0ff", "value": 1928192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809737, "uuid": "53eee4bc-ac53-4949-9274-a169b552af0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7704de5-7710-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726809888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809888, "uuid": "89d4080a-8869-4b5b-8c6a-5c49d54fa244", "comment": "Malware payload", "value": "8353cd5246bead80d94f7c7fc90625d6", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809888, "uuid": "c6cb1c9e-16e5-4882-9b3a-310dc966073e", "comment": "Malware payload", "value": "7f99977b01e48ac05f36dc51a446d0adeccb9c0ad66073d181597884f8a94005", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809888, "uuid": "971867c1-875b-4303-83d7-ed5438fa27c4", "value": "T1D016AF237590807AC26B0334591DB37D76BDADB20E34429767D4BE7D3DB04836A386", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809888, "uuid": "5544cfdc-6b9f-4f56-80b4-23f3d1b75cf5", "value": "af336d68081186dd2f182d0abf3f6e86", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809888, "uuid": "c60cff8e-7983-4c3f-8bbd-3fdda7430eac", "value": "98304:nJDV9bD55mTEbek9rEdMQWlLYzjoJMiiJ6sNF9SbRVw+MNUVg/hvMwy/Z+:V1BQyjYzjoeCD6rMwy/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726809888, "uuid": "6a1657f5-27a3-4509-9350-2918d71503e0", "value": 4073472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809888, "uuid": "1573878b-1c4a-48c6-a4b6-99c5a4be7a07", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28954e86-7713-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726810964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810964, "uuid": "5fe8363e-31ca-407a-80e5-b70b009cc0c3", "comment": "Malware payload", "value": "c15e2e154b399fcbd382b38628fbc030", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810964, "uuid": "c25ecede-6fa0-4476-99ab-66b46c2e7a18", "comment": "Malware payload", "value": "dfe94e1bfd354cf6caf74b1f3162355133f6f11512282f65b6d99f830428344f", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810964, "uuid": "32a16d30-8e1f-4be9-8994-639b64aa6dfc", "value": "T13FE30745FC519F22C5D621BBFB8E42CD372A57E8D3EE720399255B20379B85A0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810964, "uuid": "284aecc6-5467-4093-920a-954ad8f4a069", "value": "3072:LpzOFXEfuuyg4AyO4y9JkChMwQ4HP8XbsCAiz9o:Fz1jH4yHkChMKHPkZpz9o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726810964, "uuid": "9cee8b43-f7e3-4fbf-bdeb-b83306b9f056", "value": 151872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810964, "uuid": "a9511575-d2b7-4a81-9da8-f13e5144f61b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810964, "uuid": "1496888f-8d1b-403b-91ea-019f336b38c1", "value": "t11cf0dc91df800eec3fd8838060a9243b18dd31eb73310097e97fea4fc111494f0210", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c4c333e-7714-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726811426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811426, "uuid": "d6079356-0af9-46e7-bd3a-c227aaed5ddc", "comment": "Malware payload", "value": "5bc08551fed1f6d71b06c6cb2bcb9416", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811426, "uuid": "10ab35a4-002b-45b2-91e3-837e816f9e41", "comment": "Malware payload", "value": "014df9060e5721b8f8fbed6b4c15273f8c3eeb9f29d49fd47bd74ffae0f7c4ab", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811426, "uuid": "617dbe34-2b85-4484-8d12-065d088d6f3d", "value": "T167E30745FC909F22C5C212BBFF8E42CD3B1657E8D3EA720399256F20379A45A0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811426, "uuid": "3679d040-72a3-4356-a32a-786815df90b8", "value": "3072:8kQV5tOf0pfg3yymQ7L4DZrtXjfapCCOAFe1NsCK:1QTfq5B7L4DxRjfapTd01v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726811426, "uuid": "95979964-7be3-4522-8b9a-835646452de7", "value": 155392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811426, "uuid": "055d9acf-5625-434b-90e5-47fc41f6f0ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811426, "uuid": "0bd285a6-cffc-4a3e-bd78-8a032f16689d", "value": "t1a3f09711ef150ffc2bd103c384a2e237568d30ec2624b082f2bd658f8215ad0301d0", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f3dc25f-7714-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726811538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811538, "uuid": "bf93cf96-c9e0-47d8-9523-6cd9c1a82380", "comment": "Malware payload", "value": "94a306a43a62c1c8e0660ade866ef5d2", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811538, "uuid": "760417da-a788-45cf-830f-07b360f85a11", "comment": "Malware payload", "value": "9f0c99bbdc272f827d03ee285f02d3c21f7a116f905d214e7b3cb218405d7068", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811538, "uuid": "b6892f5c-8b96-4b0f-a1a4-1c2ede984dff", "value": "T1A5F30856F8819F11D5C151BAFF4E528E33135BB8D3DE72029D246B347B8A86F0E3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811538, "uuid": "e05ea2ec-130f-46c6-9edc-945ed69974a5", "value": "3072:/pvCz0dZ3ZovWMMv/XwzoEfa0ybO9bmZjCS+mrSEsLV:0zw3ZWWMuXEoianKIZj2mrS/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726811538, "uuid": "17796bcd-6e24-4bac-9395-c8f0d1d27bb5", "value": 167004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811538, "uuid": "8f0d8c32-dd90-4aa8-9728-6e1514a30b15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811538, "uuid": "c9a1d7f8-4fc2-4b8a-aed1-84e685d78fd5", "value": "t1fdf097b2ef940e6d3fc0ca4043f130221fa974d817020862db2c570f4926a85f80a9", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a5cdd41-7714-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1726811584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811584, "uuid": "eb06d689-440d-4bcc-b12b-531610bedd0a", "comment": "Malware payload (Smoke Loader)", "value": "55cf0ba0a65d11eee638b11ba9e2f3a1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811584, "uuid": "9f537385-6d80-4028-8c73-9c3655ae26ed", "comment": "Malware payload (Smoke Loader)", "value": "a2b8d4f469a7b8c8900df12569de67f5c8cb68e68177d482ff7ccfe9d580101b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811584, "uuid": "7efafa4e-1fed-4f29-9968-0e8fd5bc3de2", "value": "T19A44F01176E2DC26E2E3643C5877D2B55A3BFD536D30948B37902F1F2E32A909A643", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811584, "uuid": "6a9e0126-4439-4c3c-9770-dcb26eb26c86", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811584, "uuid": "601e4932-296f-4883-a3e9-e930483cbac3", "value": "6144:tDN0YXMIebj1xc/2K1OIoZ8yruBSXMPoiHzWZVfPybyX86EsUY:t+/IebS2sOZZ8yruBSXMPohPyi8j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726811584, "uuid": "a4c7024e-a60d-4850-879b-7b1d21889d17", "value": 276992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811584, "uuid": "fb1f6a67-7940-482a-a586-104f3b416c05", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b47d16fd-7715-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726812057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812057, "uuid": "e94e1f4f-edc9-4c1c-9583-c8cd97bb5782", "comment": "Malware payload", "value": "bb81f446f1f029430ae8e775cd128a0e", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812057, "uuid": "9e3a261a-43ea-44ef-b0d5-d049252bb981", "comment": "Malware payload", "value": "942a02081e222cf256ee6fb57c6088d298b7165ac078b67e053c6d730de0e644", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812057, "uuid": "d7bb6c62-1c65-45ee-8ebd-c141af127e59", "value": "T12224D71AEB610FFBDC6FCD3742A9074524DC644B22A43B7A3674D524F14A94B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812057, "uuid": "2852ec6c-f957-4870-9098-cffca5847fc6", "value": "3072:Uvg5rfDSewZaxTnxSQuhFO4IlO9HTEEzBnstoZV:UvU7S2oQunQ2Y+uq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726812057, "uuid": "3fc61d1f-7b18-4cf0-91a9-51e4f47b5e6b", "value": 211216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812057, "uuid": "e07cf646-077a-4c55-bb55-10c337cd849c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30358e85-7716-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726812265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812265, "uuid": "49a2a3b4-9aad-42cc-b52d-504e90a48eef", "comment": "Malware payload", "value": "54c8b5ee0e68b49e0e01997f004121c2", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812265, "uuid": "c7c85b57-a09f-48f6-813b-5f96ee8e5d29", "comment": "Malware payload", "value": "25d0c12f16b01612c447c75b8a4f013a2152b3f9a6251cec35aca90d902990d5", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812265, "uuid": "8d1485b1-d044-4667-aa46-896f21741c7a", "value": "T11824B71E2E328F7DF368873547F78A20A76833D126E1D645E2ACD6151F2035E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812265, "uuid": "7fc34c33-a377-4ce5-917d-adb645625273", "value": "3072:Ns8VsNIHayXOas7MGET1ckTlFZN7+fsxc0sN7rB+QsBiaN:Ns8VsNI6YfsAbrMsxMN7r8xtN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726812265, "uuid": "410a335d-bdc3-4db8-8c11-b9d3b6ef823b", "value": 211216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812265, "uuid": "18bf7750-6586-4ae2-baa0-5bc545823ed3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812265, "uuid": "65de8fc7-aa99-4c7b-a7f1-2d22a4c934a3", "value": "t11141c2580db913b4a6656c9d089dff27d6a331df7e162c238a10e85edb29f834d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6ee422c-7717-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726812947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812947, "uuid": "37a33751-781c-45e1-8af1-6950d0078ab6", "comment": "Malware payload", "value": "5acce1e145e7356629db22eac50b43d8", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812947, "uuid": "ed827953-49b9-4638-9ead-6337cdbd8500", "comment": "Malware payload", "value": "3e96514baf415e4065290a0128ee53d4ff0d6383fbe1fb36551e47b5215fa6a4", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812947, "uuid": "ecf79ff7-a3a0-46a7-a3cd-7d783c50c411", "value": "T16D042B46E6818A13C0D3277AFBDF42453323DBA4D7E7230699186BF43F4669D4E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812947, "uuid": "4bc6a70b-9360-433c-92f9-cd6b13559322", "value": "3072:Jrw0QbtoajGJ4Zo1at87ISaUL7ATqY+0NEsQ1iyEIyM/97Ocv9L:dQuaj9e1at87ISa+73YxN8gyEbM/97Hh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726812947, "uuid": "5d81d598-3432-4b9b-93d4-997b0789e5e8", "value": 175899, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812947, "uuid": "ce27e411-5676-4ccd-b6ea-2ad8cb1a4986", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812947, "uuid": "8746ed1f-da69-4743-bf2d-b11bc6e1f8d4", "value": "t1bd3187149922942b68b28ab4ddfc97f194265333ab907e319f2ec8cc1525041f21fd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a6e9dc4-7718-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726813087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813087, "uuid": "22b533f0-b3d7-4184-bf47-a4c66339b6d5", "comment": "Malware payload", "value": "6e4b299583e50408f51a09365cb8557f", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813087, "uuid": "f5f9c8f2-2726-4294-8eb0-20151f5f14ff", "comment": "Malware payload", "value": "fe5c47748641f3e186baccdca4a5fa2c955e127975fef68aaa96d565cf7a1eb3", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813087, "uuid": "11802f6c-feb7-4998-9252-234a6f78d3a3", "value": "T1C5F33A0AB6C090FDC4B9E1748FEAA136D972F42D2124B55F37D4BB221E4EE211F5E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813087, "uuid": "e5a3ebc6-5696-4f6e-8df7-e8a11149ae50", "value": "3072:sir0wH1xej9J4Cf35bOneTcnGBy/HRx3P1AgF5vTyzIHF:drzz+7lEygf1Rf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726813087, "uuid": "41131ab4-3f9a-41c7-b4d8-0a93d44139de", "value": 162248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813087, "uuid": "b1340e87-85ef-4725-95d3-1b4873b49c94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813087, "uuid": "676a754f-cd83-49e0-9039-5ee762458f56", "value": "t13051ea703ed2389821e7f6aa734ed669ec32092225d271e5ef277ce1ce097440e620", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b855e586-771f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726816359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816359, "uuid": "406e6395-b96a-4659-89d6-835a506c4539", "comment": "Malware payload", "value": "c45fd818b677ecc8471ffd5dfe5b93b0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816359, "uuid": "c7eb51fc-b7d9-4aa9-8589-31a506cbf3b2", "comment": "Malware payload", "value": "78e12e54122cca6f7a84576d8b6f8546a12f5a73896da6a664594b3eb99db90c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816359, "uuid": "8c7caf48-defa-4c77-9a05-09f6f52ec345", "value": "T13FB5BFCAD1AE44D29C053FC998241BCB4B2847728A7400643A6F7D8A5F775FEC05EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816359, "uuid": "c65b4986-6b7d-43ac-9047-c69d16673305", "value": "24576:orugUXnKd51Jb0NimhAJE4RGi6Kw+EbG623bNMK4iG3dVNB1VLzDo:I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726816359, "uuid": "415a2939-7ec9-4644-8951-bcfca52d5b89", "value": 2486512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816359, "uuid": "39616e37-9914-4d62-bf07-bf37d2d2c1d2", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1166960-75b2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817587, "uuid": "66020c7b-d00f-4e37-b6fb-ff6203b48581", "comment": "Malware payload", "value": "3d4d5693e4be8f660631313f23c6f64b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817587, "uuid": "8dcea538-84c9-4380-9858-42970befc845", "comment": "Malware payload", "value": "52837f76521a2abbb1bd9e44c68672cae69dcf153be4d383ff4a44b39a3878e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817587, "uuid": "5a407784-d96a-434f-bc80-75c3d6dd151f", "value": "T14AF2D751F8854727C1E41379B6AE5A8E377073EC82CBB627D8224B207AC591F1D63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817587, "uuid": "1ae0a438-d002-47dd-857d-8b7cc038f6b7", "value": "768:TjbUR4xPEXqqoG5M1ICBHGadwq3iFtKV5/a9tuF7m3RyT3pocPtBYwn:TjbUmQqRG5MNxGaqRie8aBu3h5n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817587, "uuid": "6a4896e3-4a2e-41dc-bcf9-128b198b0619", "value": 34868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817587, "uuid": "15a61bbc-fa48-4075-9984-e44de3afe731", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817587, "uuid": "dabf883f-0c49-4e7b-ae6b-3e7ec770cd20", "value": "t195e02600fc748a1888e65ab4dcdc0764a501121360575b20cf51daf0cc3f844a708e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94d1da1b-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "60e9e273-0641-4d90-9035-4d89572c00b3", "comment": "Malware payload", "value": "fdbe62ca9fe220a9a6e0baf942b50bdd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "e5df769e-a768-4961-8790-60a404bd3275", "comment": "Malware payload", "value": "9833ba80db6978ad9b33473a808ac34e18ae2c97fc26454b5c2a0d01d501bc3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "6a8f4020-2050-46c1-94dc-efe335b34d8d", "value": "T1D6433B31BA760E27C0D1A8B621EB4B24B6F547DE25E8CA0B3D720D9EBF715402553A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "2410ee8b-1bc4-4f7e-ab8c-4f26b7fb1709", "value": "1536:/fPucFQm4/g1We/ubYtqdQpu75nta1N5w:fucSG1uVaN5w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817588, "uuid": "d8f3a4c9-d6d3-47b4-aadc-0b18467ac98e", "value": 59872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "520154db-b0bc-4c93-8335-60dba64d2ace", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94d7ae05-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "05877971-e77e-40f9-a287-45cb66ed3843", "comment": "Malware payload", "value": "cf97dbb2c69d4baf8513e52a5a0c4bd7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "dc770392-cce2-459c-bcc6-d66ae1f70a40", "comment": "Malware payload", "value": "74172b5edcc04d49eed8a3d7747349cf6bf4ff9d26f55b5db249dc79fb3ac786", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "18e7a03b-4562-46cc-b4e9-41a404e5887b", "value": "T16D336A76E46E5E94C086417075249F351F23B2C893932EBB16EAC2B55483EACF509F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "19d805ec-a0b5-4e63-92e1-8be8b9d3ed75", "value": "1536:8aWjW/cXGETgWjZqKAlSW4UBOCVQV5nH:8pjWuGEfZtAuUBOV5nH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817588, "uuid": "f48536e9-c526-4343-a51d-57f863b10785", "value": 50584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "44b3fcdc-f7ee-4b8f-adeb-357fd2f27b2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94d7d3ec-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "34e8d6f2-118a-40b8-8eca-97d5a7b002a0", "comment": "Malware payload", "value": "d2d984981b55d9cdbb83901cfe3b554e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "a3132cdd-4530-4b48-9536-eec5f2348d38", "comment": "Malware payload", "value": "8d1e1efc68a5bc34507bc86b250d1d804653ec4ee91f6ee89a7aa976111aa715", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "695f5cb5-4437-46ea-ab40-3e67c724f26a", "value": "T166532B9AF801CE7DF81BD77B4457090AB632B3D112821B3613A7B9A7BC721A91D23E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "43842cfa-c9dd-4718-bb71-c26348f8e673", "value": "1536:KEQoWfMK+vCU8PCLi+vSZf7DnLS9OEa4R8YnZ:KEdWElvCR0voffqH8YnZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817588, "uuid": "eba455f4-3368-470e-845e-7aed3db7ce42", "value": 61708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "36a873b0-fb36-47fe-86d1-fc0477bf82db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94e4c0d5-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "35425a57-ae26-425a-87fe-65c0966e68a4", "comment": "Malware payload", "value": "7c53cfbcdf5a71cdfd980c48deea7a99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "be0f2fc5-ff05-4e96-a25a-d7bf4bf3adb6", "comment": "Malware payload", "value": "5bce9d1ab05aec1c0d524890017c50fe969e5c4e02b985b118badb24d8142e5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "94b5f0fc-7153-49ed-9013-d5077eef0f0f", "value": "T19373C61AFF620FF7DC6BCD3745A8170239CC554A12A47B3A7934D828B65B24B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "83fca0f4-2663-4dcc-bf45-da9ad55a935c", "value": "768:K3sJmkqClhWHgJvd8p6El5Des4ReDB2wJ2iwgugBI2ZpMIXi5Ij7+eOcIoJhwn/S:KcJmkD125B4RcBvC8W2ZpMe7+pcI3n/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817588, "uuid": "24143092-f09e-41e9-80e4-008428b77ad9", "value": 73796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "c5dfe4c8-1ef7-4aaf-aee5-9e97cb3e6a3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94eebbf3-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "c213f8e9-9249-4da0-bbe5-60af645cea7e", "comment": "Malware payload", "value": "1a4d089731407507f28c8b0e549f232b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "2153c2d8-319f-4588-9671-3a36648ac84a", "comment": "Malware payload", "value": "97c6fb6f4e125c0c759d5095781e3f343f93abe106088d83c88c3ed3713d1cad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "1a40221b-7188-4c7a-acac-616511ae466b", "value": "T144434A02B31C0E57C0A31A70263F1BD097BEE9D022E4F689352E979A9671E375586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "07340ba2-9013-4ef6-b566-c0a758139712", "value": "768:EbpJYxjEJf68CRZGRloQUEqdenPOkdUMV96mCq2Rj5GMIgglGcFRxtafS+wnnIa:q/mqzqePJ2G6+2qMIgg4AxgfGnn1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817588, "uuid": "dcde69e1-6930-42b6-9f78-28fd9021b789", "value": 55160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817588, "uuid": "186b1b88-e1cf-4964-b7fc-4c0ab9eb5890", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77164dce-fd89-11ed-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817589, "uuid": "e6400d1f-dda9-45a2-8711-aaf0a7cc6149", "comment": "Malware payload", "value": "1b2028ea67dc86cf20ba43825138197e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817589, "uuid": "26f00867-d0b2-4b63-b1c1-21682f25bab9", "comment": "Malware payload", "value": "6ccb0a08beb729ac7cf10dc2a488a2f66e9cbc9416b9cf0237e86ddc909622af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817589, "uuid": "6a54dbd5-5736-4c9e-a98d-e2fce607cb7f", "value": "T1ACE3866E3E21ABBEE16886310BF76F70C39529D636A19342E16CF7185EB124C1C5F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817589, "uuid": "5ff6b48f-967d-4e6a-af65-b168320a3eb9", "value": "1536:mVNs7K797V+nv57gbj6l6T6B6v6N6/6AePe1ebeZe5bwClA2rKQA1dXAQTI/e0hF:vY01ZkXAQT4NQ9//ImlWs4zWfOodW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817589, "uuid": "7178e1dc-1d7e-4fec-abb3-e3e00a34e46a", "value": 152121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817589, "uuid": "f811bd20-ec90-4884-bd32-5beba1519ca8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817589, "uuid": "568f92cc-bfc9-4848-853b-d949aab942c0", "value": "t1c421fe47a1f6856d2ff368345dbc46b5188227133361bf70af0985c01c7b002a93ae", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c13aa5f1-75b2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817589, "uuid": "fc3c8bb1-5f32-4556-a00c-cfd41e2fdd2a", "comment": "Malware payload", "value": "e8946de9eb892cb787b9be3dd85f1e59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817589, "uuid": "2b5a7c30-4401-4420-9148-6f915b66f112", "comment": "Malware payload", "value": "28e452ae5b9a09ccf29b4b1e08a3dd20e520a4c46e7c4981d764f7b6d0f6100f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817589, "uuid": "84e90ac4-bccf-469c-9bd2-7bd81e12c90e", "value": "T108630956F8814B22C5C6027AF92E118E372357FCE3DEB2229D206B2077C696B0E76D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817589, "uuid": "7c49fc25-32a7-4c24-b9f3-f067b601f930", "value": "1536:tpnqh/sOR5YbAP+uppI4iEvGaHA1zuInig8F2+lhyS5bYonC:K/9R5MEUaO8F2+lhySRBnC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817589, "uuid": "0b7bcaf2-c4eb-42df-8452-f6392c63ccc3", "value": 70964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817589, "uuid": "4ffa7a22-60e7-4be0-a3eb-21c66f1e00eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817589, "uuid": "e04969ca-0da8-4033-960b-6f4a36faa0d0", "value": "t175016d002ad48ebd8fc14189912f116a8e643575697728445f6e694fdb224a670b08", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9603999f-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "9821155b-8bd7-45ba-bfa6-b297a3a97617", "comment": "Malware payload", "value": "d3642907df719e5911272bd622150060", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "b535fcb4-6b6c-434c-a09f-aa39b9aac5a3", "comment": "Malware payload", "value": "1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "f2336c47-73e4-45cb-b278-0ddfd4b48296", "value": "T18DF3763E7E21ABBEE27886310BF65F70939621D227D19741E1ACCB185F6028C5C9F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "46e8602a-fd2c-4d1f-93d3-106154ad3f13", "value": "3072:ltZ4+IQeKoYxpfk0mPJELUsvZNIs0qU6m8oiKX3IlJ:UQKELQqU6m8oiI3gJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817590, "uuid": "5f23b3c9-6e9a-4c11-abc3-2c3f1e923e90", "value": 172544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "df7ea794-da8e-4085-a246-d5ca922e3f00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "20163e42-abc9-43ad-b3bd-f0598dd75344", "value": "t1d2415364983981086ba2dc986d8dbbb30125970a271bef33ff31e47c5439495e8369", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c184a521-75b2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "b96f8ec0-e237-4f43-ac24-fd71fb8f0c69", "comment": "Malware payload", "value": "02f3de907ef651a2792e88e0d9b8f67e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "3f5041ef-210e-4d77-bdb1-f525625c53cb", "comment": "Malware payload", "value": "ec35f87b0354934dfa28f2929e1d3faac0b0134704eb5874c4c67249380d1e2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "07590247-f27c-464d-bbc7-75d05cfc4354", "value": "T1DCD32A56E7408B13C4D61775B6EF42453323ABA4A3DB73069928AFF43F8279B0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "063745ce-58ca-4948-967e-01587790cfd0", "value": "3072:lS6VGvs5uaDAFEsHY07NSIYwxGn7R+SQkM/9iH:lS6V3uaDAFEs46Nxgn7R+SDM/9iH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817590, "uuid": "28e43aaf-57b5-405d-96f2-4f13cfd21433", "value": 140758, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "34b24766-dbe9-4714-abb5-dd7ed312e598", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "5c71ec99-5d23-46bd-910e-6edf199866b3", "value": "t1cd21f0255765a1199ea1dd54d8ed87b2162887232344af33de36c4cc68060daea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9645c377-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "93421d84-0e52-4d3d-a729-086fa4f434ab", "comment": "Malware payload", "value": "41e7f3008d0c0da8068d5dfb537db344", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "82cb5bd5-7e3c-46e7-af47-c5d546662cc6", "comment": "Malware payload", "value": "11d602e0818f7d2074da70d00674bb76f3cf459fdd18c37bed8053b81c5853b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "0d131321-7c98-48ef-bd09-99a8d687a6f4", "value": "T187330907F681C0FDC49AC174476BBA3AE93771ED0238F2A67BE4EA223D95E611D19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "e8cbbaad-e5a1-46f8-a3e0-eac76b5e27ed", "value": "1536:Ru31CxXVpHlCrxsNnVfvj5v+HK2r4DaEXzd0OCUjCYz:Y1sXV5lCKNVfvj5Wq0GaEDOVUjCYz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817590, "uuid": "7fd2b360-010d-49b8-a7f4-3b695ec0ee4a", "value": 55104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "9aab4808-3647-4685-8bb9-4b1ab76664a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "ac269c0d-7afd-461a-8893-32842d0632ab", "value": "t1931133f8bc215990f2ebf52ab70bd1188cbc2aa500c031f1c5b6b4f6bb52b460931c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9674004d-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "60934272-d62d-4aec-a6d7-66ab9c0693dd", "comment": "Malware payload", "value": "758b56266d9ad87e8b69e783a4cb0e49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "2af153cf-d7ad-4e97-a18f-0ef106b324c0", "comment": "Malware payload", "value": "80bcd49aab90668818cf471f89cc533d55f1f6c1b960834bb308af1f13a6319c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "7efdefec-f5e3-4a51-9974-c262abba5a67", "value": "T13E63B61A6E628FBDFB59833447B78E21AB5823D527D1D641E25CD6002F6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "075ee51e-ec52-46f5-a125-2ac43dffc891", "value": "768:bPWek0n4CjdGQKKWKmg0EhFkFkeYA+QoRxXyApGqFDjOZ2uyyQ5NeNTP4wnHIZ:bj/hNmmjAoRJym2Uu6eBPZnHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817590, "uuid": "bc5bf462-78b5-47de-898c-1d4dbd763ec2", "value": 72628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "d0871b7e-2a99-4172-b201-1902ad56f9d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "6ccd1153-d9e8-459f-ac60-22e705fa4b83", "value": "t1fb112948883813f4d7650c9d6bedff76d05160ea07164e378d40f99e9b69e429a00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "967f7068-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726817590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "c8f38307-5a1c-4e6e-8892-70db2975de6b", "comment": "Malware payload", "value": "5266cd64786da6951411f1a656878032", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "e15b3215-4489-4cee-8f70-832e7dbd5826", "comment": "Malware payload", "value": "c6fe8e15e3f306dd0e08a423cdd701eb3cd1082f0205f7d071c481d3e614590c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "41b83218-a12e-4e49-9811-ad77843b68eb", "value": "T146344B04EA509B5BC2E237FEFB8B024E33334B58A7E7721596345BB437C67999E221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "d38df939-7456-4da2-a322-efdac303acb7", "value": "6144:LL4L/Vqm9mlaOA9W3xpMS7Qn0kZcsq6F+M/RZupm9EhU7cwig:YDVqm9mlaOrxpMS7lkiOF3/Lupm9EhUB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726817590, "uuid": "3289779c-3ff0-42f6-a056-b5271792247a", "value": 246010, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "715fb8e2-8fcb-4016-9470-01954d12b60a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817590, "uuid": "d95ee134-dda1-4e2d-adb8-cbe7d3143087", "value": "t12d513294953d41086be5dca89c9dbbb30127db0a1316ee32ff74d4ac582a495e835c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1b51599-7723-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1726818066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818066, "uuid": "f88b6947-13c4-4b08-a0a4-3feac486935e", "comment": "Malware payload (Smoke Loader)", "value": "7a036a4bac70ae1c71f163aa94a73305", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818066, "uuid": "f42e203c-2ea5-4664-94f1-80138261499f", "comment": "Malware payload (Smoke Loader)", "value": "b27f2424e3727fdec24c70ef1bd3c70ceead4ed9d84964cc4974373f486c34f3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818066, "uuid": "818e8ec2-f360-4a5a-8325-c09459ed2611", "value": "T15C44E03037E0DC72E2A349349970BEA46A7B7CA36531C45B5A983B1F6D71381A9347", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818066, "uuid": "09ad3c6e-5e99-431e-ba11-8c91c37a63f4", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818066, "uuid": "c0d1bf0d-b689-449a-9dde-17b11a6f3c2b", "value": "6144:JDNHYvlgp7NvkmXRjuX5Tc9HkvsVRlREol8qg/2:Jdugpmmhjf9HyGRl1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726818066, "uuid": "4a0d33d3-de98-4c60-a25e-a5f962e3cb31", "value": 276992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818066, "uuid": "3c60f65f-3314-4361-8e4a-40f2e5b07dce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ade2b5-7723-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1726818069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818069, "uuid": "ecc88e8d-7fd3-48df-a1ff-c5d734800fef", "comment": "Malware payload (GCleaner)", "value": "fa7ae7e989eee3b990f51765a6a9fd23", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818069, "uuid": "f75614c2-2834-4a0c-b77e-26c398c66262", "comment": "Malware payload (GCleaner)", "value": "2c3b5a581ab32e52907415d1056d39f4e3ad19e92ff825a83d329c6066dc739f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818069, "uuid": "3f0c71a1-1515-4b0b-9df7-79ea72c2ffa3", "value": "T17444E00067E1C929E5A229F3583097B6DA7BBCD2F671868F22503A5F3E316C15B643", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818069, "uuid": "3e7ff7e6-c4ce-47a9-8774-3194698381d9", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818069, "uuid": "694a8d6a-49f7-4fc8-804c-ae77da7ace87", "value": "6144:ADNJoeWFaVCK/txdymwnBhop9V+vuAxCCsoj1IvB:ADMF8Ldqip/DToj1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726818069, "uuid": "dd6ab606-ba6f-4919-b1dd-b0c0fda0b556", "value": 276480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818069, "uuid": "d3e87ab6-c8f2-46e8-877c-5038e01d5c72", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8752dccc-7725-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726818853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818853, "uuid": "e1793c3f-38e0-4d9b-bc83-86369235c576", "comment": "Malware payload", "value": "781a59a7566d6b7ace5dc32700932448", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818853, "uuid": "28cbccd9-5fc1-4fd1-a98d-e0d23579e841", "comment": "Malware payload", "value": "d95f5b675746f5d74e7a197c7bc9ced176d41cf7f36ec9d802924eeeaa3fb115", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818853, "uuid": "ff3f47bb-1717-4ecc-9656-88e24ba33360", "value": "T14E34F1C8687CE25A6F6A86B6FC32670CF671F00D2F484815C5B6CB727DEA568D6050", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818853, "uuid": "64e4e951-81ab-4262-8d30-956661d995e7", "value": "6144:faoPlRqHM/6tt3bKHRb0JE/S/qR5u59WxkFyxqiii9/XbjbrjaH:SoPrqs/IrKHRbkEqyX+Mxca/rvA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726818853, "uuid": "9edf191e-598b-4917-aa17-e3669998bfb5", "value": 247881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818853, "uuid": "4b3b1fd4-8fcd-4c01-acc2-c8f31a6487fe", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4067a54b-7726-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726819164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819164, "uuid": "6318b992-27a2-449f-92c8-c930f0115309", "comment": "Malware payload", "value": "ea0236d085629c9308efed0bb742127c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819164, "uuid": "0f63e7bc-4298-40f9-a4a8-9133dc22fc30", "comment": "Malware payload", "value": "2f213b99c8f49b1d77ded9c5e95d979f9adc95e3fe3c08bdd2c03a80761943b8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819164, "uuid": "5b8e0188-2def-4ed3-ab0d-592c998f39ba", "value": "T10744F101B5E5EC36D6B30A358C7496E5163BBC926621EB4F36447B6B6D732C22E703", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819164, "uuid": "f2340351-afaf-4e6f-bae8-67f79e2218fb", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819164, "uuid": "b04fdf38-aa9c-46d5-b798-e7b274a229d1", "value": "6144:DDNYodkpTVDBgfDfmhUr8TvDG/NqTUf7jNkVE:D2xpTVibfmGrIC/N1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726819164, "uuid": "cce52cdd-8028-4123-a0af-e84a0041953d", "value": 276480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819164, "uuid": "3382990f-bfc4-4c8c-a778-d533e3b464f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04123209-7727-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726819492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819492, "uuid": "e0fde935-4b88-46da-9f78-d54a9cf0fba3", "comment": "Malware payload", "value": "1ccc98cd38cf30ea51d32f20f1c0108e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819492, "uuid": "9cf67658-88c5-44c5-bbc4-148b27a1489d", "comment": "Malware payload", "value": "d53c4a995faa78109768c67d7d71d933254dac22578f141850056568d3728b1c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819492, "uuid": "1290bdd5-38ca-4952-ae29-a61f68eee9e0", "value": "T12944F10167E4DD3AE1FF9A342C7B96A4617B7C526D74818F72B43B1F1E316C16A603", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819492, "uuid": "ed6a7853-6c90-4d28-a77b-34c2916c0f6f", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819492, "uuid": "d93cf393-e8d6-4632-9b69-8cf8cdde40e8", "value": "6144:KDNLYBrGodNalnWajT035s6TfPh50f9K9CZ/JN:K52Go/SzT035hfPr9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726819492, "uuid": "26c05b7d-ce35-45a4-97c4-715f61abe22f", "value": 277504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819492, "uuid": "99ee1016-8c2c-4066-9205-b54771bfc7c6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ec7b260-7729-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726820584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820584, "uuid": "10aba5f2-1355-457a-9dbc-5876ea493dd1", "comment": "Malware payload", "value": "ac1e404882fe6d322a7d9a1ed2828028", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820584, "uuid": "dab2be1c-3ee2-4bae-866f-3e8bf81ffe50", "comment": "Malware payload", "value": "3ed2fd41db5181822b039fd62f4d6688bc6f2abc467090bbba3b5115b8370619", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820584, "uuid": "e3c46ec2-6e65-4310-b3f9-9fcd4558d67c", "value": "T1CA953362C9F90E49F33D31753FAFF6CCEAF257B526E52B7524257E294DB280214089", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820584, "uuid": "47be3ed8-4b35-4aaa-8080-4d47dac19ba7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820584, "uuid": "84ebadcf-a66a-43c1-94b9-a38b6bdf66e4", "value": "49152:KHwLHBbtnBDQUKSH66nTenbkEctc8BPpRCbyS0AID1Zy/Yx2QlqT7vr:hLBxDnxCQd7TkIhowwyW7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726820584, "uuid": "6f07c12a-9f6d-4055-a4c2-98aef05daaeb", "value": 1895424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820584, "uuid": "bd634305-ec8f-47e4-8b79-c93f8ca9dcb8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6030f49e-772b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726821365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821365, "uuid": "39a9e2eb-d8fb-4cfd-9f9a-8a649ae45084", "comment": "Malware payload", "value": "80a0a1a9bcd5080ade393da387e7cebb", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821365, "uuid": "02e223d1-3793-43dd-8c77-c18a5821a6ed", "comment": "Malware payload", "value": "b7d6e79c9645903f60b065e235692000dbe819fb936973149db30de10cf3356a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821365, "uuid": "91e98b8b-83e0-40b1-9879-0905e7dbeadb", "value": "T1939423D04BE4FC3CE9F39D7BB0F7EA38A824644D8AA8138B031DE551DF1A3621A505", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821365, "uuid": "d9900f20-ef2a-4959-9417-a3bb0ae3de1c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821365, "uuid": "2d4e7334-e894-456e-906f-8d5af19dc22a", "value": "6144:qWHt7Zr0aVuMEy+HvEDDy7j0746dhDuWlIjDAj3bbmbwcVaIw3aysuInON3B88D+:n67V7jjwhD8DArbwwcOaPlnONFUEcF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726821365, "uuid": "f81671f4-c148-426f-80a5-937fe6752d23", "value": 411512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821365, "uuid": "db95133d-d34a-472c-9903-3e2ef41fe45c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "652227d0-772b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726821373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821373, "uuid": "2d22f687-ef3e-4640-9bcd-9ac6c4bf9b4d", "comment": "Malware payload", "value": "00690b2a2925e022395ffbcdca29f923", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821373, "uuid": "71c2a054-8c4a-4b87-9218-f6c055a9915e", "comment": "Malware payload", "value": "79455922bf1e889ba098188583a1b6f2b4a676008e63a09022805bffeda0055b", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821373, "uuid": "a30455da-e885-4cb3-b5f4-9ac9f53745ee", "value": "T13C660147FB89DB97C5BDC3F85A3329AA2A132F04865296EBD518B72D3D730D04DC46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821373, "uuid": "9b96f713-e7ea-4ff2-8f38-1d4ed0550948", "value": "98304:BjsZsszBoTamzvNdoVHsRXPjNorG7wNFafSJ110tO2Du+DSXhNpIqpeMlG+/:VFVzv2aR8hNfJ1KOYTqlfIMlN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726821373, "uuid": "bc0af382-02ea-491f-8a23-633171ff521f", "value": 6892007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821373, "uuid": "012e2f70-f61d-404e-b0f0-d0bdca63f71f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7b22275-772b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1726821485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821485, "uuid": "28ff6ee4-9202-4625-90d7-505a6ce5fede", "comment": "Malware payload (Vidar)", "value": "cd681a24c9d79c3af8caa1843296a062", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821485, "uuid": "3d20cf41-f150-444a-8e83-b489096ff161", "comment": "Malware payload (Vidar)", "value": "2b85d82dd140d794a295b87bb250ebcdfa1aeb1d729f74c37ac0b07083e70daf", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821485, "uuid": "8d56d619-ebce-4cb7-9d2a-d50ddb2ecb42", "value": "T17C94234C6BD8AF76FD92C335444E83550E3EB2443AF7868D966CE418C94A6A10DF7B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821485, "uuid": "2242e458-f0c4-4f0e-ad2a-59f81a0f64ec", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821485, "uuid": "830a9c47-9957-45e8-9326-fe30afc6cbdc", "value": "12288:CgIVaGe6BEIaaJLq2vru6fv8PF5Nn5e4AkArjUdG8L:NGmLaufTe5rUdG8L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726821485, "uuid": "9d7a9c2a-fcf5-4862-81e8-8d95f779f1eb", "value": 411512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821485, "uuid": "d2821344-b564-45b9-a74c-8f4cf02ffc7c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1504fb2-75b2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726821965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821965, "uuid": "483d4bb1-f429-47d4-a0c9-a1ff98b153a3", "comment": "Malware payload", "value": "2c8c19f4158b155eed0d04f9da6e041d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821965, "uuid": "7cac9621-baa3-452f-8923-e53be94703f0", "comment": "Malware payload", "value": "4ff853a3379e0c3ee6b211020f6ca107f011f759bed6673abc7da680465cd932", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821965, "uuid": "b22d497b-fcd3-4ccc-bb39-cea97a62f1e7", "value": "T1D5434A91F8819623C6D1127BF66E428D3B2613E8E2DBB3079D225F2037C686B0D77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821965, "uuid": "7f4eaa3c-8575-41e1-b3b3-8a3e4c6f9d0e", "value": "1536:tj7QgWzvkqAs5aWU+81Qv+VzxiCsaXvWnH:tjgt/8avWV9xWnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726821965, "uuid": "be7502d4-7090-4a40-9eb3-b6b000eaada3", "value": 59644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821965, "uuid": "bb379972-bb21-4422-ba57-6650841e02ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821965, "uuid": "23f338ba-c880-4d1b-bb86-4c1ae18d40ab", "value": "t16f2162248ae909ec2bd0828d435697776d8a30748b933412cfba6f0f4b0bdb534764", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c64aaf93-772c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726821966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821966, "uuid": "f7a7e676-1379-487d-a21a-345ce397b89a", "comment": "Malware payload", "value": "a2993222e810c376eefc1370eef86963", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821966, "uuid": "94a62bb3-1286-471b-85e0-16aa397904b2", "comment": "Malware payload", "value": "2089910f6028bc02811e07a95389295813df0485aaff451dde0c183a5cb1e554", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821966, "uuid": "7dd642a4-34d3-4bc7-a153-b69c5d19cb75", "value": "T134334AC4F643DAF9EC4705701177FB339A32F5E51229E743C3A99A32AC52602A906E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821966, "uuid": "c19adace-68ae-455e-9ef6-99ae9bc949f9", "value": "1536:GWa2d5sf1Gg+ya+nlQsF2ffDRTfwVsp3MSfCY3:Gt2d5sf1GCamme2ndjMW3dCY3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726821966, "uuid": "bdeff5a8-1a04-4d09-866d-9798fb87eed8", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821966, "uuid": "c269aed1-a946-406c-a270-14d9e2b3fedc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821966, "uuid": "de9ce3ad-698f-47f6-ac2b-2ca1b751b4f4", "value": "t1702129b2ada606fcf3d0a449d72f43d36b35d5372531797804b2298137f25c590798", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7745fb06-fd89-11ed-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1726822222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822222, "uuid": "cf1525db-afa4-47b1-820b-1032ec27cdb3", "comment": "Malware payload", "value": "74c20f81699151304dc934df4dc3e67f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822222, "uuid": "0a2c8cca-af72-45d0-aa1f-f64a291c69d2", "comment": "Malware payload", "value": "40751f90389256f3ffad676f54e6b225189e75a9b3dd0216a72f7c2d332917ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822222, "uuid": "2cacbdd7-257a-4f80-b47f-5d3d55b9c71f", "value": "T184B33B4795A89EB3C086BEB525EB59300722ED120F2F1A9621387BF4437F5CD741EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822222, "uuid": "b9d97449-979e-4ea7-8916-8873abff9082", "value": "1536:Aq/W65rWXAiP5dfK4EBbkb25lyDQnAjCNB5+TjgkHmmycgYVLu1IPYC:R/vp+9C4xb2Mj+0j/HmDcgYVy1IPYC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726822222, "uuid": "9d6a7c11-3be6-4fa8-8969-e58a6fe2068e", "value": 108486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822222, "uuid": "65d6eb66-0ccb-47ec-838e-4c461461ab8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822222, "uuid": "d9380fc7-4357-4ab7-bcb0-30637ceeffee", "value": "t1b121fe46a1fa856d2ff368305dbc46b5188227133361bf70af0a85c01c7b002a936e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "773047ea-fd89-11ed-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1726822439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822439, "uuid": "bace40f9-2dcc-404b-bbcc-2487a60bcc42", "comment": "Malware payload", "value": "8801f0c3266697be4eaa7b70e152c8b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822439, "uuid": "bf24bbdd-17c7-4ea1-8f50-51ad24cee2b3", "comment": "Malware payload", "value": "76679df267835c3ab999a0b2aacc140d8857ca336927ade85a0a5e271462ff92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822439, "uuid": "b152b4d7-5cb1-4c8e-a245-2aca786ff234", "value": "T156A35B8AD743C2B3CC530AB2124BA6AA4621FD3B092E9F49F7197DB09F374C93125B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822439, "uuid": "d9b57779-65e0-467e-be0f-9bd6fad7d596", "value": "3072:sWCjQrLpnr85EdT9Oa8vqbVr71/CEgmqAgcVyZIcBI:sf5EdTbpr71WmqAgcVyZIcBI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726822439, "uuid": "d61d8679-d68c-4888-ba49-d0f9b2dac046", "value": 99084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822439, "uuid": "9407e703-7c03-4acb-b3b5-d78912f47fc5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822439, "uuid": "dc4487d2-509e-4ccf-9571-bbae1bbdd60c", "value": "t1ad210246a1f68a685ff368205dbc46b5199217273351af70af1984c01c7b002a939e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91154782-772f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726823165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823165, "uuid": "ced06d02-d488-48f2-b939-ad63922c1182", "comment": "Malware payload", "value": "6b082832f014548bf1703ddaed1e16b9", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823165, "uuid": "9b0cc28d-1956-4bdb-8a56-47912788e929", "comment": "Malware payload", "value": "036fc1946493ce413024f5b8094bddc99f2a22e0e31ff93b63015b020cbff0e6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823165, "uuid": "78231af6-78d0-4301-bde4-7ea8b8a146cd", "value": "T1499423D889641929FC971E3068DA5375FF31374B483362F3538AEA44069BF442BF26", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823165, "uuid": "698d3287-e823-4d11-83de-9df718afb413", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823165, "uuid": "c5ea5652-45b7-4985-b17a-d468be20279b", "value": "12288:0K1t63MtALzhRqhiBsr8MxYXX9J56TWdgM9FlX:0K1t68tALzm6/MxsXwWdV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726823165, "uuid": "959e85b4-3a55-41f1-a6f7-b1075d54b09c", "value": 411512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823165, "uuid": "30802a39-27f6-45ef-b9b7-87ac2e055fee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39e820b5-7731-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726823878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823878, "uuid": "e273e30c-a7a4-40ba-bfb0-c349d0573f8a", "comment": "Malware payload", "value": "9ea82fd65b2c31055826b4adb9fd7a1e", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823878, "uuid": "2d8c18b0-838a-4f4d-9625-909413424f4d", "comment": "Malware payload", "value": "375f30c88e3a854bdb7938ebae88a4ef8cb34eae25269c20b09bda3f9675b289", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823878, "uuid": "b4132212-67e1-4862-8085-4aadbb6e2c4e", "value": "T19517332594B0F55BA5D6404C7609F6BF3EB107843CAD593C3F208E6C502BEAF623AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823878, "uuid": "d73536a8-c10c-4db2-86ae-e4c2af9881f9", "value": "393216:BeK00YmIQ/4cmSxXhrwcveA8GR3hp4p0rwM9McWinrqZvH4mx:BLXxIzXS/kcvv8JEwUMcWurqZ/4mx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726823878, "uuid": "ac493061-eb7a-4bc4-adca-20744c19c60d", "value": 20041293, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823878, "uuid": "378f69fb-2b3c-4f44-b965-2fab94097874", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e185cb7-756f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "ea568678-a052-484f-85bc-1b7bd0b37bbd", "comment": "Malware payload", "value": "a310068e2aea4aba324fab162b68441b", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "79273573-b064-4d08-9ec2-f02fce24b223", "comment": "Malware payload", "value": "607c7837fc421e3da3e262a9077c07c396f2f8813719d2f4b34c894a1431be6f", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "0b3379f1-ebb9-45de-a286-ee4953c5c6c4", "value": "T157F30845FC509F22CAD212BBFB8E428D771A47E8D3EA720399255F20379B45B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "4106f701-cec2-4812-8dc4-50c83c5c023d", "value": "3072:J7TTc6LPFJfd4cmm1t4ZDtXexTMs/OTDTLGCHD:RThnfLn1t4ZDRexTM8GbG2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824245, "uuid": "0be3702d-185a-40f0-be4a-fb22d4b46e28", "value": 158464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "1632f983-d3e6-4965-97f2-0dfbd2ba993d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "4371bebc-5b7a-43f5-ab9c-c3f65bd37eec", "value": "t15ef02700ef1509fc27e103d268a9691f55ed32ec5b21b8536beeee4fc9528c672254", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a39e0d2e-7572-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "0f485347-b87d-4d50-904d-98737a950dfe", "comment": "Malware payload", "value": "e13306a947c1d046114336abcc97f2b3", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "4ef7a4b3-9356-4c46-a5e9-5bcad429b423", "comment": "Malware payload", "value": "c5163ca8d77e5a00abdfbf365a9239cd9c24681dd76fbb8b068de8a707385dbd", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "e8ff6536-e873-420a-afbc-4d6617caca70", "value": "T16224E71AEB610FFBDC6FCD3742A90B4524DC645722A43B793674D528F14A90B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "f3464852-4626-48c3-9b0d-def37fc93a11", "value": "3072:ixziCZcY32mkehvRPReOE4oNRcAasLPHnBg:ixJZccke1RPo0yFTB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824245, "uuid": "eb879b28-4378-42ee-b9d6-2c1787238d5e", "value": 210988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "18b1adff-9c88-44e1-8b42-7b435d157d8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ee7bf6-7571-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "0ae33d97-59b2-4ba4-81d0-a00630116677", "comment": "Malware payload", "value": "b9e48e0aeb67924e38c67ec1d1dcdcb6", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "33181851-69f3-476c-84de-b059face9390", "comment": "Malware payload", "value": "7459509da90ea82a350d7b3f1071939c45a5d6e494c4f5895014167711e73625", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "6ae5c990-466b-473f-9ad8-6627a9872f88", "value": "T192E3F745F8919F22C5D221BBFB8E428D772A57E8D3EE720399255F20378B45B0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "cdf506af-eea7-4722-b1cf-d15e25df6511", "value": "3072:5LITXxhrPF/jB4vi/47qJl7FUc+4+uOfHD:OTXR1ce476l7FUA+uOr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824245, "uuid": "926c86cb-688a-4623-a430-090a792c5545", "value": 154368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "6b02d54f-4182-4bb7-8ecc-527f2adcb0f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "6372a9e5-7d5c-4cb7-a0dd-891ea0419e0f", "value": "t1f0f09701ee04099837e1038bb03ab42798d870fc6a246c11eabed94b81216c5b02a4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36cd66f1-757d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "c5905c99-309e-457e-97e5-dbc646869d51", "comment": "Malware payload", "value": "c72c4ba45661b952fb5c3900fd753162", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "7224b23e-0ab2-4bda-a7bd-686f46458481", "comment": "Malware payload", "value": "0dd8eebe8befc515ba1f3e6afe46f5a36338681aba470258a2f25c96ce1da183", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "b1e4f39b-c8a3-415b-b87e-927528b14639", "value": "T154F3F816F8819F11D5C151BAFE4E528E33135BB8D3DE72029D246B747B8A86F0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "e7124499-7b23-4837-81ff-47b3c333d799", "value": "3072:HUrbbwEKxpSnwkVE16ZzAX4btEfaG41WHbAl7ZrZTJZHe:0XwEKWwko6iXEtuanmAldZTJA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824245, "uuid": "bb5fc8bb-a13d-4c31-b050-c502ea401e3b", "value": 166716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "3fd473f1-590e-4d6c-a049-cf7b3fe0511e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "7a1c8742-65ae-415f-bed6-554795c689bf", "value": "t1b7f09739cf691f5dafe48a00e4dab0029ba8758c0b024c027e3c968f91536d8f40a4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "109a986e-617b-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "71899b17-3f3a-4ab9-95b1-d1d77835abb4", "comment": "Malware payload", "value": "a10a5cb7aba9d9c3c051af6581490377", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "214a6656-e286-4dc8-a200-beb3fbb7e9a5", "comment": "Malware payload", "value": "f6e9515696f5f42c2789447a08cce6856aefc040e2efc4927f67522a14fde5d6", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "5d53f1aa-4a78-4732-8f0c-fb0182c4483c", "value": "T18D24D70AAF610FBBDC6FDD3702E90B0635CC655722A42B7A3574D528F54A94F0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "031cd2d6-bd8c-4ad2-b318-230923b0fab6", "value": "1536:4mB/gusIOWiqqmt0p1fi0CAcYOqPN7hKfrNKC5n/PgPHfcdZ84AtaJf3e8+/FHxz:XRDhfCp1TSb/PgsdSYQ/FPuG6rbNZ7Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824245, "uuid": "5bd71a3b-ce88-4337-84da-28941520da97", "value": 212064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "ac257937-e65b-42d4-968a-d2a5cde0892b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14fbffa5-7732-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "07890681-d442-41c7-8e6c-27ee7c68a944", "comment": "Malware payload", "value": "6978552b5e565446a63dedfbdb7dee48", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "ae6f38d9-4ce0-411c-b3fe-cad718f6b68b", "comment": "Malware payload", "value": "8d5e67603c89e78771050a2d1d415a333a5832c470fbc6b50b7ec1d795ce94b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "24bed034-b014-40c7-ba64-c618722cd93f", "value": "T185D0C22FCD02C0BBA190489AAEBDB998B64F12D9078A13085A7D662399A8C8860915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "c5b5b87c-42e7-4240-a84e-add35c3260f8", "value": "6:/VJDN4NvDiVYkLu3F5kJVKE6LsVKE6NiVVNDV2uVf6vGv5:/VJueRg5sguThB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824245, "uuid": "302e8009-47ad-4adc-b3a4-284f063b4b2f", "value": 288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824245, "uuid": "fd0c2adc-7f93-444c-9f34-042913425e8a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc311ee4-7579-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824246, "uuid": "568764bc-0a3a-4bb6-8f0e-aa9ce2fb589b", "comment": "Malware payload", "value": "14530296e2d26fd69da9b25eb1bd8dc2", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824246, "uuid": "ed6d5dc4-fa60-4f60-a02a-8acbda29a3db", "comment": "Malware payload", "value": "91a450bd59c4fa567bcfa7648a77e7c999f8b468b9a6b98f2cc84eceaaf73f60", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824246, "uuid": "a7282db6-43d0-487d-80d4-2b7db4183b53", "value": "T1B024B61E2E328F7DF268C73547F78A20A76833D522E1D645E2ACD6151F2035E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824246, "uuid": "f87bb10d-8176-47de-9f75-ded3d98ca483", "value": "3072:HmCIp+IRYKp4Ligmps4zt7ZSnzwVhzblWMAIHiT2:HmCIp+IBWLi98sVtlWRJT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824246, "uuid": "2c203e01-1f54-4ea6-a540-bb69f8390c24", "value": 210988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824246, "uuid": "083ff69f-95d9-4fb3-85f9-275f2d7f576d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824246, "uuid": "1305c66c-c09f-4b7b-9818-0abd19882563", "value": "t1cf41c2180d7917b4a7652c9d089dff27d6a331db7e162c238a10e82edb69f838d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c7019e9-756f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824246, "uuid": "bbaec587-4135-4b65-a52b-3397cfc31f70", "comment": "Malware payload", "value": "6accb5cbf08954c771010fb50d7e5057", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824246, "uuid": "b3c19171-62c1-4d49-9b5b-e20abe562594", "comment": "Malware payload", "value": "4ef7e55263eada12687d9d3e3b53492893021f261c0f5ed46bd7722ae0e6d6ec", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824246, "uuid": "241607f0-8283-4d5b-a630-0f5de66315af", "value": "T1C5F34B06B5C0C4FDC4A9E1B49FAEA0369932F46D2224751F37D4BF261E0EE216F5E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824246, "uuid": "b89c11c4-4ecc-41ab-8618-7f8c69110748", "value": "3072:cJdc4qi5jmyj5+upywKMGS/HRXjlqiCFaULDhJk+4F1:edBqcj6TWRpqx+D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824246, "uuid": "29c1b25e-7a80-4c63-87fd-468683748800", "value": 164040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824246, "uuid": "6dc5897e-04e1-4c89-96b7-55a71f647304", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824246, "uuid": "6e843ee9-22f5-4694-b72c-9142b7c66057", "value": "t15051a9753d52398862f3e766b34fe6a8fc22082215e171f5df237ce5ce16b480d224", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3912e8a0-7732-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824306, "uuid": "c4a2329a-af66-4dfd-8fa6-b6a0456dcfe6", "comment": "Malware payload", "value": "be896500f42598944950b14f2180ff8c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824306, "uuid": "d9502b49-e2d4-464e-9398-2c86d3ddf959", "comment": "Malware payload", "value": "3c8969e9cd4410324a1483ebcccdd68d5774ee2a6f442bcb0d73905e2e11f5c1", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824306, "uuid": "cce0f969-09bd-4bd2-9cf7-8ce4bc6948c5", "value": "T186014F9A838386F02484874DBD918C10F4DAF0FAAFE48A4ABBD529D64118C257572D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824306, "uuid": "725f0e83-d402-40d3-b0ee-bd3186c68a78", "value": "12:dngg7gGQ64UMFGIyQCoH2GjlslllnIdlnQ:lt7gGb4UEGIyQVWMq/ncQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824306, "uuid": "0aaae4ed-c18e-40a8-96fc-9bfbd7c1365d", "value": 705, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824306, "uuid": "b87df3e2-28f0-4ad5-8e29-3bc309124c95", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15d75a2d-757f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824306, "uuid": "a061f85d-08dc-46f4-82ef-e479b830eacd", "comment": "Malware payload", "value": "bda09e775aebfeedad6135d4a2669d93", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824306, "uuid": "51ca93c9-cb53-4c37-a451-0d14c9346497", "comment": "Malware payload", "value": "42e79f864e4d1820727ecc660faa2322f3049e9fd9e180337101dc94ba61d5bd", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824306, "uuid": "d8659718-37e2-4684-9e07-ef32407f6440", "value": "T124043B06E6818B13C0D2277AFADF42453323DB94D7E763069918AFF43F4669E4E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824306, "uuid": "40efeee4-c8d9-4a99-b7c3-164f59568bf3", "value": "3072:puaswA8HJ5u/TAioaa9YwuSWVBMwfaYOYku2/HtiyBZzM/9vJys9L:kwAO5u89aa9YwjYBtfgYZ2FiyBJM/98q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824306, "uuid": "b381c043-1b12-4333-957c-3c300285d344", "value": 175173, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824306, "uuid": "2dfaab8f-9e17-4772-b346-bab4c71efa7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824306, "uuid": "65ab652c-5523-4ed5-a38e-291565b9661b", "value": "t1bd3187149922942b68b28ab4ddfc97f194265333ab907e319f2ec8cc1525041f21fd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb4c8190-7382-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726824965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824965, "uuid": "4049afa4-b6d4-4fdc-85bd-cb4b2434213f", "comment": "Malware payload", "value": "eaaca918555a27ced6b84fd9172d2703", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824965, "uuid": "20a492b6-cf47-4d6a-840b-27b64c35ab48", "comment": "Malware payload", "value": "064148767523da56979a7c42a858dd02c4883daf53b0727a31b50db77560060a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824965, "uuid": "28082b51-3cc2-4f98-b4a7-3784d273efc8", "value": "T183635CC0B693D8F4EE1246B93177E7774B72E43A015ADBC3E365E832EC92411A5272", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824965, "uuid": "5e969f37-e640-4a89-bb9d-8e1438352dc1", "value": "1536:7zt3vAe/k0z6o+3bN8gSAHaRXIc9iu7SmPJYXHNagIK8JV050r/tMYP:Pt3vAe/k0z6o+3bijAHaRJ97SmPJY345", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726824965, "uuid": "d8eeb011-48f5-4cd0-8d1e-031e212f96c8", "value": 66736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824965, "uuid": "4c12bb9b-9148-4719-b58c-b30db1f8afaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824965, "uuid": "1a16ca82-042c-4dde-902e-cd56a9a6e1f8", "value": "t1342129fb2ebd4cf8b3c5ad04c31e5e51192ae53f29a036a001a2d51137abec150b9c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ba9450-fd89-11ed-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825038, "uuid": "879e7d09-1b9a-4067-b7e8-75258287dd39", "comment": "Malware payload", "value": "fd0dda44926045f66bb357724815f34e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825038, "uuid": "45c5f0c5-1270-4bd9-8cf6-5f86e482cacc", "comment": "Malware payload", "value": "fb0abe9206e85c1449b997bdfe36244ddf5597b92bd59f724b4ce15effebe0ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825038, "uuid": "e2be7f8c-5b50-4a59-b45f-b598bfbf4aa8", "value": "T1C3B30692F900DFF2F40AE67604C34B2566B0BF660F536A66B21739A79E721C43867F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825038, "uuid": "b2a02a53-4ac4-4f3e-a49e-ed5f837dffe4", "value": "3072:FQWUEK1FSHGfs1QbEE6QyPwns/avcWVRm2pgYMx3IPtW:FasGfs1QHyPwsSc2Rm2pgYMx3IPtW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825038, "uuid": "d5aa88af-04ce-4b14-b91f-c8ae9ea4873e", "value": 113759, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825038, "uuid": "67b6e0eb-f600-4bfe-84ab-8ab6c2aa04c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825038, "uuid": "78e89a05-cb79-4d25-8c71-73c9af329d9d", "value": "t18421fe46a1f6856d2ff368345dbc46b5188227133361bf70af0985c01c7b002a936e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea8e5dc6-7009-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "b363eb59-becb-46c1-9c0d-ba70f7a9768c", "comment": "Malware payload", "value": "32f78043dd20fbafb2c4fbc497ff60db", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "0cad589a-6284-4b91-a419-663b7b25ba1b", "comment": "Malware payload", "value": "193cab93f3b4562276c2a66545cb0989f347f434215c4249b21a233e561a2e0d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "0d2a64f2-e91c-4f72-8d83-2d3a1d16f38c", "value": "T13FD30A07BF514FF7D85BCD3746EB0711248DE81716AA2B367934EC78B24A28E16E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "65287561-c3e3-4dc1-b050-a26bd3406943", "value": "3072:vqUIsZGDQOVNL5vhakFAF86F95OXcB7K39DhqrS65EAjZYotbTRepjI+j6ysgUVT:vqUIs8DQOVd5ZDqr5rRHbWKVpv9z0JZs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825266, "uuid": "e9d5d19c-ec37-414c-b118-b5b7b310457e", "value": 134451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "0ddcb759-157d-43b7-9266-d99ef86453fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "b7878a76-6ce4-49de-9a64-1502be0ef1ef", "value": "t10d2110729b32462b2aa1d968d8fd47a1150992131245fe73df28c58c141a01ee52ac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8a9cb78-7011-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "9cc0d143-508a-44e7-92d1-5f518b9320fc", "comment": "Malware payload", "value": "67b0c02204af32fa3fe78b393a544dcb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "2f6e3574-34a5-4804-8a89-c56e33191f45", "comment": "Malware payload", "value": "e00d15c286ea62025a50e8241a0731c86dd5a66b6e9914ec86ae236c513bba51", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "7247908c-d677-4aa0-9e1e-b2d4a7f5df71", "value": "T154D3EA0E3E218FBDF299C33547F39E30569476962AE2D284E26CEA541F503CD681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "f8436f07-e67d-49ee-b92a-3cb697170421", "value": "3072:3iICmevqMA5XgznSsSNejsfzDDL+Vpv9z0HpZ6B:31zeyMA5MSsjY6Vpv9z0JZ6B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825266, "uuid": "cb0451ff-c988-4160-ac47-99d91e1b3435", "value": 134451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "b7e0cc45-a643-452a-9c55-efcdff0acbfb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "b2c38181-fc13-41f0-8d84-62e24a4c1ef4", "value": "t10d2110729b32462b2aa1d968d8fd47a1150992131245fe73df28c58c141a01ee52ac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2deceb8-700a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726825266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "f83ab04d-129c-4090-9b9c-8f9dd36a73ba", "comment": "Malware payload (Mirai)", "value": "f35a1cde41c4dc1a521538ad692bc4f2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "a12ceb09-7639-41cd-8f9c-b179475d050b", "comment": "Malware payload (Mirai)", "value": "4b86a06ef40222e21a961d65def4791b5dbdfc35b6ded4d8cab9e799d5cfef52", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "f56f3cda-7409-41e1-826f-e9573bb3a192", "value": "T122932A47B8819B11C6C512BAFA1E118E7313177CE3DEB2168D206F30778B96B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "c1441d6d-7d18-4f36-b11f-d83f25a94295", "value": "1536:T2nph2gbce+QmmGxgg7PfCnmedAaBAa6C+WM4i7PmqmdX5RYmsPQ:gfbL+DHg6DedAaB0mndXfPsPQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825266, "uuid": "bfb56a08-dfa3-4953-bfe8-5a82c3baf54f", "value": 92104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "7f07c888-1a4a-49ff-97de-db71cecddd44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "41b3e69c-895b-4218-a72b-73d0ace1f987", "value": "t149d02bc2cfe544951bd00572974e7208daf0ae86734178530f5d8407a162aabb03ec", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "469d1a84-757c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "325e67c9-0d16-4416-8519-bfea353946ed", "comment": "Malware payload", "value": "fcdda31871ab3ec25f4ff0c03a18ba1d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "f8d7afe1-1799-4b65-a0dc-a72f501e0f9a", "comment": "Malware payload", "value": "8e666c4e7cbcb8899a76b09ccaf60dd45799b5b5d7a5143abb012dcb572baf08", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "92e967d5-580d-4ea7-8495-012bfcffce00", "value": "T1E3834A92BD819512C6D1227BFB2E028E376613A8D3DE3213DD25AF3177CA86B0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "e163d5f4-6bec-4542-b642-99d15f40e80a", "value": "1536:S2CGoexVvl4/V/XwDXQ7Tgnm5vpiT7ICClW2OCVsGpTWj7R24geYc:S2CpexBl4iAmYQ7IrlYGpajQ4geY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825266, "uuid": "89aa5a02-63f4-4b2b-a5bc-571d02c5419a", "value": 85568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "54311eb6-1ad5-49f3-99d0-bc774bda80ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "00c48f58-ebf8-4d30-a5db-e31c5026422f", "value": "t1eb311ff66fa90bdd0bc8c784c2ca161d4efc35795f202066ce5abb5b84826c2b21e4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4297730b-700a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726825266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "f4f8f0e8-c4c0-42bc-bdd9-ac9893f6f0ef", "comment": "Malware payload (Mirai)", "value": "a601336f1e2d7256ac32378ce285fdf7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "e35e0ffa-5d20-4f22-a275-41cffbc1513a", "comment": "Malware payload (Mirai)", "value": "a3aba60bf868fc97ffe7995065f226a5b92e4fc5f354dffaddff3f65ccf5d2a0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "f9b4454c-1a9d-419f-bb12-2284378e7135", "value": "T1BAF33C47E6818A13C4D21779BAEF424633239764D3EB73059928BFB43F8679E0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "56aeabe6-5d65-4ef4-b8a5-2ab73b510c3d", "value": "3072:kB+A7QcHDc+sMCzayV3r1MU9mN0Vn8FXGsvhMaezzM/92bm/w8g0G4:kB+A7lgMYayV3r1MUwN082WMaenM/9CO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825266, "uuid": "9867051e-e6da-49ba-aa44-4d107af59e21", "value": 169308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "9aca7060-1905-43c2-8a9d-daaa8740347e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "1cce0dc2-645b-4e6d-94b0-70da92f672df", "value": "t1cf310e729b32862b6aa1d964d9fd87b1111987131244fe33df28c98c141a05fe92bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77aec55a-700a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726825266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "e4ddf373-37d6-41dc-9f13-2a20160f0d4b", "comment": "Malware payload (Mirai)", "value": "0bd9c485fddb0a25293ebb6f3ce937b9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "558fe887-0487-41fc-be21-a6acb77737a6", "comment": "Malware payload (Mirai)", "value": "7502991f404ac489809456f4d26407280aa9b36499550b70e9f1b17ba8d459df", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "7f393be6-95ea-485e-b791-4d83f66fa675", "value": "T1CC834B42F9819612C6D122BBFB2E028D371613A8D2EE7217DD21AF3177C796B0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "499d6afa-47c8-41ce-802b-2e62ca009753", "value": "1536:+OwXv7t3CKZ+QBWaDXqcox81KjRO7oCyg1gO86MOESG3iRFvaslB:+OwXv7PNDqNxdjooCRSV3qaslB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825266, "uuid": "1cbc1733-49a7-40d2-9894-6ad0defdf240", "value": 85456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "3267cd21-aa13-4236-9b91-8bbb6a07a908", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825266, "uuid": "e24f945c-2a1f-4c98-9df7-7d55c6907d44", "value": "t12631cde3db490edc5bf0cb894719b51997a875e95b0124e7cd299baf41534c4320e8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f7c422a-760f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825325, "uuid": "412403e5-021d-4ca4-a114-bf8cf1dce338", "comment": "Malware payload", "value": "d5f2acf4c22e552d5014e425cc8a733f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825325, "uuid": "943e07b4-8507-43eb-a321-a749efaeecaa", "comment": "Malware payload", "value": "c42166ae0513b845f60494d7f52d13752cea2bc609231c47856b551fb6f151ab", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825325, "uuid": "55257510-1a06-4e30-8c6d-ee5f7837f214", "value": "T1C2C3FB0E3E618FAEF299863047F79E31569437562ED2D681E16CEA501F103CE681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825325, "uuid": "e2163b0f-4955-4d3b-b364-6a4d5d9ab403", "value": "3072:KxDu1d5yxwAJ4+1zf/DB/+NDPRd2wdrlz8SpPAr:K50d5yxwqTDGF8wdrlz8uPAr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825325, "uuid": "476f8425-1de7-4936-826e-ae0cd70f7a52", "value": 129126, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825325, "uuid": "1e47648c-bb1a-406f-a054-061960f9281e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825325, "uuid": "2cede76b-2d3b-4846-97af-5289f7b4fcf4", "value": "t15d2111b35b75422b2a91d968c8fd57b1250dd6031245fe77df34c58c101a01ee22bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "844d6fc1-7608-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825325, "uuid": "9a869f31-1456-4096-8bae-90129558d03a", "comment": "Malware payload", "value": "15f6a606ab74b66e1f7e4a01b4a6b2d7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825325, "uuid": "229bb6b6-e0d7-40f4-99d4-73e6cf4f821b", "comment": "Malware payload", "value": "81c775f9540a66fded643fe4ec53dbbf35742bd3b069d95d689da313fc9b80a9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825325, "uuid": "3ff4f73e-58f4-44d0-8904-85c900366338", "value": "T10FC33A0269528A13C1C617B9BAAF415D3722AB78C3DB3315D9147FB42F827DE0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825325, "uuid": "3d191d33-6f8a-45c6-bc95-45e6f7f1c2f4", "value": "3072:Ymv6Z16i0qNNCXVak5C3fPzfDtudHm0WPZQk:9v6ZeECFa1jfMdHYPZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825325, "uuid": "8d5d7cfb-c459-495c-98ee-108e80bc2a24", "value": 128210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825325, "uuid": "fe0e94dd-d41e-4c28-9d72-bf0af55895a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825325, "uuid": "ced75e9d-74ea-4c06-947c-b8e24d203964", "value": "t12831fb736b75462a6a62d964d8fc97b2111986132345fe73df28c4cc241a01fa52bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ece74097-7609-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "9a2573c4-59aa-4041-9095-00c126a895e5", "comment": "Malware payload", "value": "e197406e6552a873492aa3a36c1b1f94", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "0a85cc1e-3c80-4e21-9f9e-a2cd75ac0732", "comment": "Malware payload", "value": "04494e350e886b19e6ecc49092e12b4fff00fe76e2d751f84007f50cd14e29b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "2a95664d-ab81-4147-a3cd-233c2127ee0e", "value": "T1F0C33C0279418B23C1D227BAB7EF425D3721776587DB3306AD297FB43F8269E1E262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "01fc03f4-38d4-48c4-ac95-5f6e3572349c", "value": "3072:cb99rdL893o6E7ZLv+EBD/TSXyNqPkoj36k/VjEZQEmNjHar:cbI3o6ElLvfB3SXZ36k/VjEZQEKjHar", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825326, "uuid": "a367da94-48f7-4039-af65-d9f32ef4cdf6", "value": 119908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "b23593f1-adba-4bdf-9c49-733ae40d16d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "0b3a0577-0276-49eb-80cb-2f05c629cb30", "value": "t15d2111b35b75422b2a91d968c8fd57b1250dd6031245fe77df34c58c101a01ee22bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "832b639a-7608-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "25ce5d13-bf96-4d2c-8923-ed0b8e7118cb", "comment": "Malware payload", "value": "f3ee194f7a794f4e802998f804d5aafb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "6f0d5a46-c82f-4685-b062-2eb9789c00ea", "comment": "Malware payload", "value": "8c1ca31bebe8d473cce4c0cd8da5586da2edb438436a2361cce072e526960e8a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "30d95eac-c9a5-46b8-9e21-82a8844d9bab", "value": "T189B33B02BD818A13C1C227BAB7EF425D3721676587DB3312ED287FB43F4669E1D2A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "5d5f4994-3b13-4f5a-8c1b-5f042a38c261", "value": "3072:uLBlcOHQtxceTl4NnDfTvXrAVCpQVsf0QElp4HYr:uL0OHQtuepknXvX0wpQVsf0QEL4HYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825326, "uuid": "c877df5d-2123-4826-a613-d23f9e355c4b", "value": 113394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "030a09b9-bd16-43f1-a39c-5036d6c1f8b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "4a7bf6cd-05fc-4bff-8a89-2c8bbe231ee3", "value": "t15d2111b35b75422b2a91d968c8fd57b1250dd6031245fe77df34c58c101a01ee22bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec2a8d36-74a3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "0214ef99-c2a9-4296-a3d4-3315b7256cb7", "comment": "Malware payload", "value": "c9fd7f9eeae7f109d0a1f0d4016fca7a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "c7956940-fbfe-4ecc-bc3c-967e19c52c4e", "comment": "Malware payload", "value": "d97129fbd5ae1087f7213df4fcc18212abfcc2f72622e6cafc334f3909d0ee55", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "79176c3c-1098-41b7-8f6c-f05a98dd8562", "value": "T19CF46B02EF951FEBC4BBCF34856E831705ED888306C2A635A1BCC96CBA8D6594FD75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "89297757-d2bc-4565-97d3-397aaf930380", "value": "12288:tI/NqbOf9n2z/xKT6ZZevI63plj0rb2Era0FkD4TiqHuO8ocLjRqpvKid3dHb/og:FI0NgxU1/Jfh+Vuj5jmVGkKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825326, "uuid": "8b2592b7-f36a-4046-a2ae-6244815bebbe", "value": 726764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "d486bae1-02ae-424d-b892-0808655ce1c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "c71a2ec8-07eb-4c41-9fa6-ffd75409817d", "value": "t100014cb38fb162275682cea4c8fd0352212cd5578a09fc77d630410c24490af9527c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "885ff8d7-7609-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "37e9151f-73dd-4f8a-ae75-07a06441ff22", "comment": "Malware payload", "value": "5b37be51ee3d41c07d02795a853b8577", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "f3f44ad0-5c86-46e5-b041-b4fb310d53b1", "comment": "Malware payload", "value": "e03580729f2f09dbd937d685fc9229959e84c9f329bee7eee16536bb8f9e60cf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "d2772dde-d634-42f8-8403-2959bc240c05", "value": "T129F34C47AA818A13C4D62779B6EF424533239764D3DB73069928BFF43F86B9E0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "5c24bf5f-c3b8-4164-a125-74ff93c8005c", "value": "3072:aOaGYkNFcBpJa9P1tPQtzXE/zpUJQ/DlXmbLFNM/9dbg1z:raGYDHJa9P1tPQFXEMKVmbLfM/9Jgp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825326, "uuid": "2d45c266-cbeb-41b2-86ee-f2fb00723f28", "value": 167696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "1f9c202c-cc5f-46e8-a022-6a4cceb16a72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825326, "uuid": "ec136bff-78c8-4c18-9785-7b648a9bd043", "value": "t1b3311c736b75422a6a61d964c8fc87b1111887132344fe73df28c4cc141a01fa53bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94068cfb-760a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825565, "uuid": "0ba5b019-8e8e-41c9-acc8-94661275f6b3", "comment": "Malware payload", "value": "af2995ac3274f290d225209048c6ff44", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825565, "uuid": "034aaea2-5110-4f1b-b1a6-a27d7c1e9ab0", "comment": "Malware payload", "value": "5494cfc931fca9f7945e8a4f92802c307a2f1515fc4286a3f4100f60bb0119e7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825565, "uuid": "2eb9e843-705a-46df-bd73-50564cd35937", "value": "T157B34B03BA818AFFC486C7B4579F51358413F83E0B3672A677E8FEAA2B499D41E1D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825565, "uuid": "4b31839a-436d-4846-a8ac-96eef888cf0d", "value": "3072:DnHV2ki9G1GjqJcTjKfaYXjR6axpYwh5t2T/l+1hsmPpJlTc:jHV/i9G1GjqQKzTHYk5tk/l+1hsmBJlw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825565, "uuid": "ea0c63b8-ac8e-4667-9a23-bacd28752f6d", "value": 109355, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825565, "uuid": "103b412b-ef39-45ea-a5f5-59dd7d7ac9e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825565, "uuid": "929b8dc7-d82f-4fca-899c-7dbca521081b", "value": "t1a2211e735b76462b6a91d964c8fc47b1251d97172245fe73ef34c58c242a01ea22bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be4f276f-700a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825565, "uuid": "f80193b7-7710-4b1b-b764-0f78e1ca0f47", "comment": "Malware payload", "value": "51e06b57dfb16c2999c351f73c778f30", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825565, "uuid": "37f9bdbd-fec2-48ec-a387-36f0fd1fbb8c", "comment": "Malware payload", "value": "2970ffa62f3033c64a781ce28395103f6d0385b2b67988ad554c14c2440a4508", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825565, "uuid": "04e6b13c-5b42-416c-a1e7-bfc43a1e60e4", "value": "T161734A82B84BC0F9D84B49304277B73FCB32D56A4026D65EDF5A9E36DE6364192237", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825565, "uuid": "dbf098b9-6600-43d1-93b5-1fcafd5bdc00", "value": "1536:vccry619IkWxDjcKeH/tB2Gdh3koN8p3WA1dL5SdWvc9T1KMyuaQV:vcc261+kEDjcSHLpU9T1KM6QV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825565, "uuid": "4d1b176c-53d9-4f3b-8516-414d6a484545", "value": 76752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825565, "uuid": "094a1b86-8443-46f4-ad4d-09ac9fe27865", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825565, "uuid": "def03213-c8c2-4de6-a1ef-2e2697e8da68", "value": "t1a631a4fb1a6e1ce8a3e49c40835e6f513a5ad737256073a20523e534226be8140aec", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b719f9e-7735-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726825625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825625, "uuid": "0ab15c12-1edc-478b-a44a-5476fa1e62f8", "comment": "Malware payload (Mirai)", "value": "2cdd668862594e495923f7dd6ff64dc2", "object_relation": "md5", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825625, "uuid": "510195e0-825e-4095-b27c-d3f67f68873e", "comment": "Malware payload (Mirai)", "value": "7d6cf62f30ae9c2b1d7c1b774e138d102eb8f7233c122c8eec48e4f01c390cee", "object_relation": "sha256", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825625, "uuid": "c23fd8ae-c0ad-420e-91b2-0b0d1950570f", "value": "T10014871E2A228F7DF2A8C73447B74A24975D62D617E1D684E2ACC1145F3039E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825625, "uuid": "e16ffe75-3e89-4b8a-aa95-a66e4d54fb7b", "value": "1536:Y7ADgTTypbF8P+zWrevHZdsCSpOhCmS5/QywS0zGDwWNqDsnzLUvWVupXPBLIY+9:/hpg4VhG1DwlszI+mBLIY3kjetK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825625, "uuid": "084ba059-b6bc-4393-a6cc-6c50e06e4a1e", "value": 190536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825625, "uuid": "c9a4b9bb-d0a8-4558-848b-c6856efb2cd8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825625, "uuid": "939801b0-a8ef-4fd4-b086-192ac4000756", "value": "t12b419e181e7807b4a3695c9e15ddfb36d6b320db3e261c278e21e85aab6da435d14c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9301979e-7735-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825745, "uuid": "44200a00-11a9-4d7a-86c9-3e91e51df225", "comment": "Malware payload", "value": "e996de4e37d0ee0cd8a1fcc78934c65c", "object_relation": "md5", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825745, "uuid": "db21e0f4-9802-4bb5-b8f1-144e511eb44b", "comment": "Malware payload", "value": "f914d993307f10051808f6b44a6addcfce51db9ae961aff507524a0a23f2e85c", "object_relation": "sha256", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825745, "uuid": "b6f820eb-5b9d-4c60-aac2-7e006fb629f9", "value": "T1C2140B0ADF610FBBD86FDD3742E8064235CCA54722A93B753578D928F54A50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825745, "uuid": "2cdb4d39-c7c5-44fb-9032-54e8bbe5b6b4", "value": "1536:A2gkxRHVzhucfHM9L+GIV8ieEkw83e5eyzvw9MtPGrYYSXuujG0l3LNK1eLozM5x:dgkTVXeyznjzUec2zbgwJIw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825745, "uuid": "6e010937-8f29-495b-951e-1194ada99f7c", "value": 193384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825745, "uuid": "6ec9f515-478b-454c-a40e-bf43a8b13d08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93067a98-7735-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726825745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825745, "uuid": "b6d0f312-f2d6-4e2d-8b08-9e7c7f8eb3f2", "comment": "Malware payload (Mirai)", "value": "72c657d8dec4b6aaf9dca78b146455f1", "object_relation": "md5", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825745, "uuid": "070e6c33-f15a-4362-90c1-3c0d7b3a66ea", "comment": "Malware payload (Mirai)", "value": "a12d4afe956366da5939b7489444c3543fc8f640dc1c26ecb42ab03b7131585d", "object_relation": "sha256", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825745, "uuid": "3e634354-6101-4dd1-981b-400486126896", "value": "T1A0E31956E8819B11D5D115BAFF1E528E33231B7CE2DF73025E286F607B8A87B0E3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825745, "uuid": "0d51a8d0-2209-495c-bfb2-acf18587a329", "value": "3072:h6wlUD82S3XhSsHJJaVgN76Ak/WGXxPivzA:dsO3XYsHbamVk/DxPivk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825745, "uuid": "ed41c3d4-9987-44ab-9573-270b1e0a52ef", "value": 146056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825745, "uuid": "202dd3e9-9dd1-4f45-9a06-3bc41c719a2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825745, "uuid": "8f9ff2f6-344b-446d-b5f2-73531c135017", "value": "t1ed11bd64cf5809ed77d90718426d9838a59c3ab92960702a4cbfdb0ac7876d270209", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "936a6b8a-7735-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825746, "uuid": "2adf8d58-a1fa-4f52-b6b3-7a565cadee9b", "comment": "Malware payload", "value": "9897763995e15c25c832217ca2b36116", "object_relation": "md5", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825746, "uuid": "9a26d864-513e-4048-a660-7a796897b4a6", "comment": "Malware payload", "value": "6849147843302eae56e87f3f38cd4eadcf01a8e58826e4319ab6274a4c6b31e5", "object_relation": "sha256", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825746, "uuid": "fc256203-6f63-4e2a-9c45-e271dd0530d3", "value": "T159B30859ED416B10D9E635FBFA5F424973934B6CE3FE7201AA244F2127C6A1B0F7A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825746, "uuid": "3fb00353-1856-4154-a1b8-39891a210f50", "value": "3072:bqy+DmduUPSlzEvkO8M84Oas6Eu5Rom29sOna3FQJ:esuUPIzEvkLP4Oas6Eu5RRYDnKFm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825746, "uuid": "cd66fdd6-b017-4e73-b13b-3a89c874ee0f", "value": 109484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825746, "uuid": "485ee7eb-6cee-4abb-a56f-7779f79e8de8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825746, "uuid": "4a9cda7f-e19f-424c-b46e-601bf0cd9e5f", "value": "t10611e1a14f6409f8bdc5430c44ac71599d8838b93934a4148fbfeeca96e35d67429d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b771224c-7735-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726825806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825806, "uuid": "41930c9f-7b35-41a2-a96e-3242fa5aebcd", "comment": "Malware payload", "value": "a1ad25686c6554a8bc9124a8e60b847f", "object_relation": "md5", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825806, "uuid": "4d970ec9-7832-4359-b8d3-a8b36908de7b", "comment": "Malware payload", "value": "d1db037c5d2890f028a1082745de9317c3e471cc14f5e5d1beb4260813a6bac2", "object_relation": "sha256", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825806, "uuid": "1bcb7a34-10de-480f-9f68-cc57b5fe8a4c", "value": "T138A36C86F6D3E6BAC50604BC112BE377A771EB621194CE02E3E87EB59D23C61860D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825806, "uuid": "6a59ffa8-1755-49f7-be2b-678276ba0da9", "value": "1536:XTSJYe3fH8d9F1Vw7sBMICddlE5zIRXfSRBhD3xLehpZ7Hw1wxJnjZep:X2C9XXgdlE50fSm/9IGBZep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726825806, "uuid": "56f06073-31bc-4767-94cc-8c5c64da05ca", "value": 101612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825806, "uuid": "5503ed0d-f9aa-4430-9e98-01be221ff8dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825806, "uuid": "3131ff59-381f-4a7f-9e1b-b97915dd7873", "value": "t1a35128f66ee90ce477d10900e24d1fa27e1de93f196477a502b3583533a3b82926ac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa5a77b6-7382-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726826466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826466, "uuid": "a1bd6946-437b-4b90-8161-be3b056bf65d", "comment": "Malware payload", "value": "03798b86bc54ac3c42f2aaf804f75906", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826466, "uuid": "78b5f0c3-f4f3-4a75-a539-7a97d1e66ec0", "comment": "Malware payload", "value": "e5eda3103261bb8687fe123b34542b2205b317b400ff62f4379cddda1c1579b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826466, "uuid": "817af228-c08d-4b57-ac89-3950dcd0d2fe", "value": "T14893D746BF610FFBDC5FCD374AEA1306258C591A22E97B367630D828F54B24B16E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826466, "uuid": "e48253ff-f1c6-4ee2-9de8-79421504b727", "value": "1536:V6sKQp+Q5jN7sohrE2/IR5lUvFZePUpzsFbRYV:VzKo+Q5jN7sjR5MF0G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826466, "uuid": "c15a9447-7bed-4ec1-81bd-a57aeb38eeec", "value": 97252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826466, "uuid": "c76826db-4585-4126-a2ae-5912175e8e78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb8759f9-7382-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726826466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826466, "uuid": "82b8091c-0b01-41d1-8c53-28805fafb257", "comment": "Malware payload", "value": "83ebc17a0ad22bf212537f4b33259033", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826466, "uuid": "8899e34d-e33a-42c8-b5a7-14c9d3efe9fb", "comment": "Malware payload", "value": "e3d430c9497acc695ea1bc62d8454b9d7e3c4090c5f26bf65b25d68b99920880", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826466, "uuid": "f44e231c-492e-4f1e-8440-32b727964065", "value": "T17293D91D7E219FACF7A8833507B78E259798338637E1D285E15CD6016E6038E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826466, "uuid": "1d7a6457-9e7d-4e50-99f0-c3d16c48ff95", "value": "1536:P21hOIXcnJLaxXZ7Bvs0goraQieB26vlHve2GJzYODPLGw:ehOIMnJLaBBBFrrasB26vlQfDjt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826466, "uuid": "759aa6a7-3f07-446c-b335-e04600ebc10f", "value": 94004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826466, "uuid": "b91ff51a-357c-40f2-98c5-7f1e2dbec523", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826466, "uuid": "c919eca0-2d4b-4e2b-8dea-339590dba431", "value": "t124112d58893822e097751dd96badffb7e5a130df0b255d378e10f8ada96dd818e00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d07f02c7-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726826707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "79617460-e598-45cb-ab07-2e1d75a5919a", "comment": "Malware payload (Mirai)", "value": "291a1dcb5bf4dcfd4e0d1167b0f6037d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "3d265fa9-ce2a-46f0-8051-3c0296521796", "comment": "Malware payload (Mirai)", "value": "dd7caae05e99df2a67f3e4bfbfd2120f182c1d4afff7932a9336e605666e93d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "89dc4122-47fe-49d0-8768-48db758efb15", "value": "T137E2E1A18BC6A6A1C6F91CF082AB31C7F92E1FB9C69F344707454918ECE75532F209", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "09c500ba-e725-49ad-a263-ca6281d2a225", "value": "768:a1jGX0l3Zf2hQ+dZM/Ugnm/+Y9q3UELje:cx3oW+7xgmGBLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826707, "uuid": "b6caae77-776f-48b9-a813-2d4054cc0891", "value": 33060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "d9d645ef-5603-4461-979c-88be9ad0c131", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "39720ab9-3b11-4298-a5a6-ab07fcfc84c9", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0890455-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726826707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "a7df7f82-dcda-4e72-b641-0356a3509666", "comment": "Malware payload (Mirai)", "value": "c5a78b9c95b765d4ea30766b260ced99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "49283c9e-7acb-4183-afd0-77a78eb52cbd", "comment": "Malware payload (Mirai)", "value": "bb0d1635bef508d1842e12baddf19f7591f054c6ae62f170edc8bf84b7101519", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "4f28c0a2-4343-4d6c-aaa4-0caa875f6ac6", "value": "T11AD2E09EF9F13907D45E093EE09C3AA4C92A25C1619E572C036B84EAF3BC42FBD590", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "b34f5a06-0aee-4254-bfbd-be468ab0fb22", "value": "384:3h9CuWYJh1ivXgFgMOGANoulXtPz3urqhA3t8nFoKJuA4U/LKXRDuDwUcnIRWGVK:3hkuDJ2w+Uoht7rhA3t1KJuzhEwoWV3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826707, "uuid": "717627be-6c9c-442e-b1d5-71b26800804d", "value": 30372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "6c1fb713-a53d-4fc1-88ff-058e1efe02d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d096bccc-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726826707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "38255567-ebb5-4d70-9b34-ab03d15a293f", "comment": "Malware payload (Mirai)", "value": "d88c30e9076a7cb788687772f1c0969a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "18890c96-ff29-4d3e-865b-26f74c7d0a86", "comment": "Malware payload (Mirai)", "value": "afb92b8a5d7c2140c336ea4b0969e0449ca0c8479650c74463da04d8fb25c497", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "25f163c1-c1a0-486b-929e-23cd451d8e86", "value": "T19DD2E1BD3F66DB77DA9955B93F9AA823B0C07034C1909B0170C4EC05CA204BD3F626", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "a1dc21a4-cab7-421e-8598-2641b4c978d0", "value": "768:8AlPasTx26rJ0PALxBE3n2jW+vYMS6X+OAgoWMe:p5xvrJ0oLxkCNI0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826707, "uuid": "0072a8f7-1542-48b8-bdb0-ece2ab1d9da9", "value": 29500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "4b1f20c7-c4ef-4447-976b-ae5fbd4c87a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "36b6cc1e-965c-4901-8c35-fba9bf04ff32", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a0ba40-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726826707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "0db87011-edb8-449e-9fd3-02884531f2eb", "comment": "Malware payload", "value": "4db3ebfd6811caa94d739e37139e34aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "71b747ef-bef6-48ae-a608-f22dab1fd2b6", "comment": "Malware payload", "value": "4e97bc8fa2687723b1384f722316c2bd7e181232f04b72df969997de2f2135a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "c552a0f2-0eff-49fd-8212-13318555199a", "value": "T194B2E114A7B275A6D2F02C7ACB66C546D7821B7CA6D678303F48A618BD89847433C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "83d1d20d-9c4e-45ad-a704-8dbfd05d961b", "value": "384:/4Nl2fITaeuCrwTxURyIL1j3Mekhu0UwHygIngIMcGiEStkKfjhymdGUop5hu8:/jIWVURyMJ3MeGu0LygIngICiESKK7sl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826707, "uuid": "c96bd5d0-fad8-4537-9296-96185ec37f4e", "value": 24552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "36ea6f13-16cc-4fa5-b7b3-5dda508a785d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "62f02a4f-fdb4-42b1-973f-0a5ba2a683a6", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a54504-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726826707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "02337975-43ce-4133-b36b-e61a2ea98e02", "comment": "Malware payload", "value": "471d32b9d81d5d30fb5efbbbe72c25d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "52010b6c-6ffd-4945-bdc6-ec4e0d695662", "comment": "Malware payload", "value": "74a9a88ee046c2bd28c690a556fd689e4bd39fe9069c979635f4fdbc82f48a36", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "70d14061-e98c-4ee6-b612-22a250d76371", "value": "T17F539EA1C5ECAD98CA1481B4F514CD398323A408A6A72EF7D746C796900BEECF4597", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "aa0728da-d581-409c-8323-5e88c5b7893f", "value": "1536:XaLIwyDV/DnVLwiYs6aWb17sofs3XN66bpP5z9Cv:X0IwMVrn6pPZFf+XsYpP5z9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826707, "uuid": "3918c799-a4c1-4f4a-a348-b7f5d6a8bcb3", "value": 63856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "6d4f45ed-d195-455f-a84c-6164c08cfa74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a580b2-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726826707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "513aea62-2994-4094-a78c-b709c4965f56", "comment": "Malware payload (Mirai)", "value": "48880a6ac767120ede3a7b326fbd43c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "50cd5be1-bb3b-4548-a3dc-29633d7e416f", "comment": "Malware payload (Mirai)", "value": "9d8ffff12ca1e5ac2ba2ac2b1fa8cc9afa6790d50188f273d796774433c7dbf9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "fa2c0e85-3235-474f-88cc-4132afb34cfe", "value": "T187C2E1A1EDE38700FD72627AE61CCE72019A9560E39D73EC1509DE22D72F37866B14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "ffec14ed-546d-4412-bc92-550c8bfce343", "value": "768:4+oC93Od2l57C5JAvHewqfaiUbVO4SyCk2cuSH86:TP9Od2lQ5cHewqvAiQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826707, "uuid": "7ab1c40d-7557-4a01-bb06-4eb520423966", "value": 28084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "6438c506-b93c-4931-9791-aac5086348fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "53ccc7c6-4b08-4e23-9f74-a759fd5cc265", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a90105-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726826707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "21dadba1-bda2-44fd-9cf2-3b7c35d57de1", "comment": "Malware payload", "value": "d988faf2a18b13df845bb96d7fd925a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "2eabe17c-2d6e-4653-8f29-a76b738947f7", "comment": "Malware payload", "value": "2f59c3ca2c8df17ca234448ea682c640789c993674f638f833b801bde17379bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "e68f1c84-94eb-4ca1-ba97-cc3cd0ca599b", "value": "T168535CC6B4119E7DF9CBE7BE85214D0EB820726150931B27B76FFC83BD721A48946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "f8fe0dab-9ec7-474a-89f8-528421745c4f", "value": "1536:rBTk4xSviETkFGo3FNTphyV2/k1KqZLjY81:tkETp4sIZf/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826707, "uuid": "94544ac6-001e-4498-9797-158afda9a6d0", "value": 66560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826707, "uuid": "4543a3c5-b99a-4412-9ce2-b5111a023643", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0b5cfa2-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726826708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "3d2c1de6-fb73-4927-b399-07e62644d01a", "comment": "Malware payload (Mirai)", "value": "d2a7da0a571046f14508b36b41000148", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "2bba7cad-bbb0-4081-ae26-f48821658247", "comment": "Malware payload (Mirai)", "value": "6d30959ba78905ee081ca2e98fe136b807ddecc8ff136ad37c6be43bbd07e531", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "092805cc-899d-4130-8dee-56c35715cb3c", "value": "T15ED2D1FBE9A2DBF0D87A56711406ACA4FA96103B9622076F59B4217FBDF740C1621F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "6de9fa2f-dbe6-4721-9fa3-d1e0a889542b", "value": "768:vof/KRmhkYzAyu/pmTlF7g2cJurIIyx0s+:vMAmlcFRmTlF7ahTt+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826708, "uuid": "1c72ce6a-698c-4cd5-9742-e4a6a5e33bef", "value": 29464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "b4f3659d-e5c8-41e0-8eb3-0bc196ea64ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "f3beffad-021b-4c9c-85c6-b4d3a6160ce6", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0bcd8e5-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726826708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "ad571502-9446-4a09-b34a-7ac507a9d5ed", "comment": "Malware payload", "value": "a5417077a319c5fcdc62ecc5f71ed0d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "17e34b7e-414a-403c-b90e-364b1a3a01fd", "comment": "Malware payload", "value": "325081381ac093e4aa5dd31f7928a4cbd4f8473116c05ec2f66e8a7422417168", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "d904fb21-af73-4ace-9553-9eaf27f33114", "value": "T1BFC2E174D3494C91FEAFAC342D89DCD477A51B4B3BAB1AD82191EF120E279361B02D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "19fab9be-a37d-4338-ac06-c47e9aacd67c", "value": "768:QPXLgfKc9vCkT5afR2cbUl4lAVM34uVcqgw09U:QBc110wvlwz4u+qgw09U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826708, "uuid": "739f839c-3403-46c0-822d-98b4d2f1efc9", "value": 27092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "9d40ca6a-8e51-4aa9-a67c-a5e5a9107f77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0c11b2f-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726826708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "93541154-d7e9-4fec-abd5-655dbde76ebf", "comment": "Malware payload (Mirai)", "value": "ec6bd988d182dc991282ca08c605192f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "acfb4f26-dff4-4de2-9231-e0e21e94c592", "comment": "Malware payload (Mirai)", "value": "334cf16c77948814779c39e448b512e641093a5522c0c179c596dbe7155c5400", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "483acb21-efb1-4cc3-a169-42ccdf0de84d", "value": "T175D2E1B00F0519CBEC56E8F556A403511E500EEDBE87A89226D8BFD1CD96DFA3843A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "1b6e66da-bc0c-4a28-96df-2a795a9a2aa1", "value": "768:8RWd9NgbsoSGbxhZQjmQjdK7z1Ey9jJgGlzDpbuR1JW:f9WbsaZ8lEqWZVJu8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826708, "uuid": "a8bcdda0-4ad0-432e-81a9-c01b808ebf2c", "value": 29432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "5efb88e6-88b6-4f2c-99fd-8123bda124ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0c594e4-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726826708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "bd5a4815-f227-4043-9aa4-caeba0beda4e", "comment": "Malware payload (Mirai)", "value": "09a87048dc42920de4ae0c11b39965fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "add50f7e-322c-47f5-ab43-42195350a6ed", "comment": "Malware payload (Mirai)", "value": "616916aae4d314e7c8f41ffbdd2ce05a1877e6928a26611ec014a7d24da3e8d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "0fd3cd41-d11f-4c7d-ab80-d05c3037485a", "value": "T10833021A89376A31D212AD7BDBB41DDABF4A1B7CC0B56E7B301506EC286230252DD1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "8a41547c-15c0-4a97-8fa9-2ba1ebfb54fc", "value": "1536:8WFfRLq5METwy/CbStUUDTXdNz7eTLX1I+TwOMi7uAazG:n9RLSMETCeHP7eTLXfT3uZC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826708, "uuid": "a5dd4a13-ff37-4c32-89de-8c3126f880fa", "value": 52528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "9279dbeb-9f32-4fa4-9577-8962b3f6bd2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826708, "uuid": "7b9096c5-456f-4f13-9402-332b0090d91d", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "169b5307-7738-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726826825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826825, "uuid": "d7648bfe-7768-4f8f-a3a3-f838b427260c", "comment": "Malware payload (Mirai)", "value": "691d9ade31f4156f62dd4a3304822f4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826825, "uuid": "df2dc774-b736-4ccb-874c-904f81246ab4", "comment": "Malware payload (Mirai)", "value": "bb24c94df21dba9fba244648bd7583abd44c69e7f0e0ebde3e5a8dcdb4019ccb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826825, "uuid": "8792103e-bbff-4e4b-b77c-2feae8c117f6", "value": "T1DEC2F2B091EDB075A9708E758E3C444716820E68D1FFF297112A5371AECAE9212F63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826825, "uuid": "2cd72617-d230-4d27-989e-23102ba0ce3c", "value": "384:Wb6EuPIwmCXn2CXdp9k9y9n+U88MlFEIv6U72aMqNOwZihymdGUop5h57:WbVuAQ94an+U3M/1iUqVZps3UozL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726826825, "uuid": "911068f3-d2a8-4cc3-8a9b-59a0861f0691", "value": 28188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826825, "uuid": "a955b075-0890-4885-bfc9-2554e6165942", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826825, "uuid": "466abb18-98f1-4c0d-ae2e-e3e961066012", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76db25ad-fd89-11ed-8817-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1726827061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827061, "uuid": "c3e7c821-d28c-4618-9924-e645798ee287", "comment": "Malware payload (Gafgyt)", "value": "d27290ab623efcaa5d3522250b99d47e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827061, "uuid": "65c7ddc7-5a08-4886-881b-8a1172794240", "comment": "Malware payload (Gafgyt)", "value": "7dea00d12e92552d62f4a373bd1feaa6f3ccfe0667ab1afbef09625e5594df1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726827061, "uuid": "6b8bf5e8-d92d-43cd-8b58-2ac53f084579", "value": "T125B328436B1C0B87C49B9AB01DA737F18B69BD7112A351C9A90BFEC04733AB81527F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726827061, "uuid": "39e181ac-71b9-4e75-aca8-69441fccecb3", "value": "3072:WD3l+XQzPeV91310pWudAKakpNDtm2pgYMidIP1W:WD3l+XQzPe713CpWCAypxtm2pgYMidIQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726827061, "uuid": "eb35105f-3287-44c4-94e4-220bfd7b50e3", "value": 113194, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726827061, "uuid": "c78f13ed-ad49-4254-9d0a-2fcfd2a7037b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726827061, "uuid": "805d4159-374b-4263-8160-0bca0f73a414", "value": "t11e21dc46a1fa856d6ef368245dbc46b5189227233361af70af1985d01c7b002a936a", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf9380c-773d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726829302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829302, "uuid": "800d0fa9-e993-4779-83f6-70bb37c22262", "comment": "Malware payload", "value": "c0311d866d57c4c7c4e84938d91a87fe", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829302, "uuid": "8ce4e9c4-4bf5-4dca-917b-7be4d0d90d26", "comment": "Malware payload", "value": "c55285a7be3fb6e3af39089e2758c1ad09ed92078c164059d32118705274b1e2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829302, "uuid": "7c855fec-c7a8-4bd5-8239-813ef40dab5f", "value": "T12095336108A23145E6395AB92855E85BCFD958E0ED4CEF49FC2BA320809FBF311F42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829302, "uuid": "8868e0d4-de88-4af3-8c9f-a21749d3a61f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829302, "uuid": "1f7d1131-5d15-4abf-bf7f-a0e1589eddf3", "value": "49152:jmajsW1Zs+oII/J1vcJdnUoL1US4xjbcDCt/mXQSSjE:jmajqBxJ1vcDETmVN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726829302, "uuid": "8df916a7-2200-43ed-b2eb-275c6ea5584c", "value": 1948672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829302, "uuid": "3c664ab4-acbd-4a81-9518-127b03c22485", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52b79976-773e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1726829503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829503, "uuid": "30623502-3160-4509-97e2-238ecefdbe56", "comment": "Malware payload (Socks5Systemz)", "value": "a43b05794475124dc82a0b066d22c7ab", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829503, "uuid": "270785e8-a010-4565-885c-c5cc89e3e89d", "comment": "Malware payload (Socks5Systemz)", "value": "acb3026f04d0f15c24b2dabd56ab69517ff9f4c4e523caf921e8c526aefb065f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829503, "uuid": "23ee2802-495b-4b1e-9c33-91b5ba5452d0", "value": "T19CE5333AACA46830E446C7F28E2487282B716D7161F4B4745EDBAF6E8F3B651F01B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829503, "uuid": "3a2cdcb6-734b-4fe2-b87d-feaee955f7ed", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829503, "uuid": "223e250d-4faa-40cf-a38d-29e69ddefce8", "value": "49152:C999svKZ1NWO/xdlD1BuJ7gQK+i+FQBohBEJo/D11ZbgWG36wKdcewpGXKQ:M99svGdvGJ7gnhBwBT71HgWetKGjQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726829503, "uuid": "5be552b0-989b-4659-9768-b5c642bd1109", "value": 3072417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829503, "uuid": "9bbaab0c-4ff0-4750-9415-ba52d38fb688", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8033c890-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726830008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830008, "uuid": "964b03e7-b2fe-416f-bae7-64f73c3d0087", "comment": "Malware payload", "value": "83b98ae7ef4e69a2be51d85aff936170", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830008, "uuid": "ef93ff99-9f09-4cbb-8edd-10a4b59a1093", "comment": "Malware payload", "value": "66754afae0b3fb8c4c9a5cb48657f7212b56cd70568d049618e541e713e8d036", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830008, "uuid": "50d4e850-c073-4830-b6af-fad77b2933ab", "value": "T1D8435B21BA361E17C4D1A8BA21F30724F2F24B9E25A88A1A3D711E4EFF60A4075577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830008, "uuid": "f6afef82-e9d0-4243-8004-3c67aa5ffc5e", "value": "768:2WoJrq9NsldZiu+TtkdXBJzufkIPDO+75sc0nR2cT1tsI5w:2WcSNmdZiu8k5jufHf75scItsd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726830008, "uuid": "14a0b368-0cd5-4850-ae3f-3dcc81cae3b8", "value": 56288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830008, "uuid": "2a1e0945-0868-4a8a-81c7-74836c6f4b2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8090a4fb-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726830009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830009, "uuid": "6ef9e10a-1e08-4cfa-9dc3-52780251d119", "comment": "Malware payload", "value": "4141e37798ebdecece4b5a3bac993e6e", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830009, "uuid": "874d8b16-b9ba-4e19-ab74-22a97b944703", "comment": "Malware payload", "value": "f924fb5bf042215250c4aeec578cd4f8bde751771dd030b20aebec1de9707419", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830009, "uuid": "5134a21b-7974-42e8-86d0-8ea34c9ba2bd", "value": "T10E333B01731C0A47C4676AB42A3F17E0D3FBA99121E4FA88250F9B9A9271E3755C6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830009, "uuid": "f5d53701-74dc-4ac0-9129-2e3c6c3ba12f", "value": "768:M2zFg/xuRircRxE5WhUVwYUyT9zB4zLZLK5M9cm4Fw+t/mTIuB:7FmETIkhUCZqzCzQ5M9v9+ZmTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726830009, "uuid": "d2c98131-5f80-4347-894f-2a805ad46ca2", "value": 51736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830009, "uuid": "f5d9a51e-4641-4afb-8cc3-1f6789012867", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8119cb2d-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726830010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "f9cbab96-411a-4997-b826-48cc33f6e1cd", "comment": "Malware payload", "value": "198b411d9aa3dbe3f3c3fd1b62ea86d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "742ef67b-8c07-4e03-a881-4a566e4d563a", "comment": "Malware payload", "value": "9126d0bdedb6b15f0af8569aaf3dac5ab887d7594515e9a77585622aaffe6593", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830010, "uuid": "ba9da541-ab27-4711-bc17-f5cde6c4d266", "value": "T11343391BF68180FCC29AC274572AB23AE57771BE0239B2B573D4FA177D86E614E2C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830010, "uuid": "1c1670ce-a9b3-415c-964f-45f8643b72cc", "value": "1536:KxKtFALhI11z7vFQu3l+6wGAWPPoClnPIWRzfcMr+xmGj:XtI211neY+6rAWPxnjRzl+xmGj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726830010, "uuid": "8d7b4f14-6c10-4d2d-9e9c-7a40567700b8", "value": 55168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830010, "uuid": "52c26383-4a5e-4f59-b82c-a51a1785c9dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830010, "uuid": "a7953188-b1fb-4556-843a-2bdb8fe64dcc", "value": "t1c811e2f139756894f0e7e872331be66c08382a5004d071f3c4f0b9e6aa11bc20eb6c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "813efe05-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726830010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "deba60b3-7c9b-4f69-9721-7fe202e7a772", "comment": "Malware payload", "value": "38c89910a7883a700f247e5add8fa288", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "35087903-8a11-4750-9421-8aa6287f5991", "comment": "Malware payload", "value": "b6fc11d0d8cec962e0180c8db99cd645d7228e8a901c3ce12326f6831c8557ba", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830010, "uuid": "d51054d0-722d-48d4-b605-5dfef24bb911", "value": "T13CD32B46EB808A13C4D6177AB6DF42453323AB64D3DB73069528BFB43F86B9E4E235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830010, "uuid": "8208c100-c7aa-4591-bc69-a0d45ed36130", "value": "3072:tx+e6rhNa10zJaNQtXc/qdlgHUvUbM/9lypPQkvp:tx+eqNa10zJaKtLngH44M/9l7kB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726830010, "uuid": "6c7866be-04d0-47b1-8d3f-f59adbdade57", "value": 135997, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830010, "uuid": "6f70ce8c-5cfc-4884-a58b-de4bd7d9b0a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830010, "uuid": "3ef2a5b7-21c0-4bfe-9fe5-93995dada149", "value": "t16a21dd32a77151196961dc50ddfe87b2262987132349ef33df26c4cc581e05aea2bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6619622a-7740-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1726830394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830394, "uuid": "4af48c5e-e2b8-4318-b992-7bca3bcc3e27", "comment": "Malware payload (GCleaner)", "value": "7abbc4bc9cb8a7c1d37cd11442c6493e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830394, "uuid": "66a19b55-a3ca-4b1c-8b90-3f2f8ad49540", "comment": "Malware payload (GCleaner)", "value": "10f41c654d9ed7f210ad3ac0d9cbe323caadb7957006fe7b7f4b4956530657b4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830394, "uuid": "8902cdd2-c740-4640-ba78-0a36a3247fef", "value": "T183847C02C2A17D47EA624B3E8E2ED7FC361EF9719E1877291219EA1F18B11B3D1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830394, "uuid": "6deca0fb-7f92-4ed5-827d-0742eea7a9d2", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830394, "uuid": "4e8b43d8-9fb4-45a6-bfeb-509497413bd1", "value": "6144:iDN7oMJm/X0JYtPGl2bTKkiaI7AFQWMyWskGBwDiB:iphAkCsNyIKFMOwDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726830394, "uuid": "6a5894d3-9daf-47b5-ae17-b3e0cfaf8f9d", "value": 406016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830394, "uuid": "3132116b-b314-4e5b-b6c7-5b2ac3c308ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a612ed59-7741-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1726830931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830931, "uuid": "f75de94a-c337-4b19-82e8-d8c0f64b60ea", "comment": "Malware payload (Stealc)", "value": "eb1066ffb3d47d1cb3fc9d6546995532", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830931, "uuid": "3ed60e63-523b-420d-9428-95c83c449f97", "comment": "Malware payload (Stealc)", "value": "4099de9f922fb34ff00e8bc58f3f59c665f29e93ab21d99e71a82fea1abcf9ee", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830931, "uuid": "ee6d854e-052b-4c9c-a18a-1ff844e0c837", "value": "T1DC848D02C2A17C47EB624A3D8E2ED6FC7A8DF9709E1877671219EA5F05B21B3D1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830931, "uuid": "237ba4c8-ec8c-4692-b785-33d5df7bf210", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830931, "uuid": "cff61e88-b53a-4a44-9e86-af39270a1649", "value": "6144:JDNMotva/Dem2E8lGJ60+HWl0Gp9OhrRw4jJFemszSwDiB:JeGqam2BlKhAWlBp9WRwWzOSwDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726830931, "uuid": "6a87b327-4fd4-41cb-b123-4ef310bece8e", "value": 406016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830931, "uuid": "3521e988-1729-4e8e-85f3-a2a503f362b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9cc2bc5-7741-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726830991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830991, "uuid": "8806bc22-ee18-4eae-b634-d36fa121d69d", "comment": "Malware payload", "value": "533c4d9a65257f0f0e00109c94052700", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830991, "uuid": "70e26e0b-627c-4c64-8cfe-3ae1dfc46986", "comment": "Malware payload", "value": "bbf94efb580361b970a4f4b748295ac6e601c581dd3e86c694194ed073dc3df0", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830991, "uuid": "eddadf86-f08b-4882-a610-59017194a280", "value": "T13224DFBD05CB937657E9BD0A295BFA15B9E44D2F3836B9061F1C0AEF64240E6F30A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830991, "uuid": "e9d306ac-54e5-48a8-8971-4493bc485c2b", "value": "3072:CpewdzZhtX3IXGBfX2QALh+LPRCLZElqJymBpysO1g479IarahpG3Vhgt9jJi7Gp:C/dzZzHIXGfmQAg0EsymWHDopig+LTFu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726830991, "uuid": "ac2124a7-d783-46d0-a48d-61f198d5c07d", "value": 213075, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830991, "uuid": "bb827e9a-883c-47ab-b26a-47fadfbd521d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81192876-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726832056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832056, "uuid": "e3959394-0809-42de-a69b-87865bd3b807", "comment": "Malware payload", "value": "a41463be81f27f4de32f6926da473f7e", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832056, "uuid": "a84b00c9-f24e-44be-9906-b89917dad289", "comment": "Malware payload", "value": "24cf0460d6c3e4b014b1e4172e1dc4df0b23169c04cfaaba571c7d6ccd56a31a", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832056, "uuid": "599b6fd0-c114-44ec-a5ec-c5a6d58066a8", "value": "T1B4235BC8A583DAF8FC1605752137F7375B76F4B9012ECF87D358E522AC52A009A1A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832056, "uuid": "4dd981da-8183-4112-9585-1b974a22b854", "value": "768:vb+4+2li4CLuSVhjnpgMcg9InW7XYtZ9H5mpFb2l3thrCmxH9XbAD8eXScgIs:vb+R2lVCSSVhjCC9z7XzFb89xxHpbArg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726832056, "uuid": "bb41587c-762b-49d4-8f7d-5554fe842e78", "value": 46256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832056, "uuid": "3fed79fc-84e9-4ef8-99fb-c558e19ecb19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832056, "uuid": "42e17add-620b-43ec-b310-d3cd784be211", "value": "t1cc2103b36d7209fcf3e0a84cc72d43d31775da57193269f944f2285027f219280a28", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "790edf94-7744-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726832144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832144, "uuid": "a0cc8a65-b3fc-41f9-bc6a-e8f3ad63d290", "comment": "Malware payload", "value": "9bfef19c85130060ca9c93e835d936a2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832144, "uuid": "afd4bd17-bfd2-49fc-9152-532ca1662a26", "comment": "Malware payload", "value": "85d37203127e9d2585a4399ffdbd56cd6e68a4730f2c48f56f8562ccfed79ac2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832144, "uuid": "ffe82149-aa5f-411b-8bcf-db5c34022968", "value": "T19A847C02C2A13D47EB664A7E9E2ED6FC760DB9709E1A7725121CEA3F04B11B3D1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832144, "uuid": "d730fccc-d849-4176-8e68-c1c7d8d7f892", "value": "827297e739d4dc45bd5e6431a2540fd7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832144, "uuid": "f1940f12-942d-4046-bad4-9e61d7ed02f7", "value": "6144:PDNXYulaB5lD1Hi8oVLSAWxHO7OfVi9ykSr2619P21ksb0wDiB:PVPaB5h53KLSxHO7O9kyd2619A0wDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726832144, "uuid": "ce0118d4-5d6f-4490-8dd9-a4b894f385fa", "value": 406528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832144, "uuid": "28fe217c-00f8-4f69-a4d7-c488f0bbfba3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29f924ce-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726832150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832150, "uuid": "35dc7da5-a62b-4a34-a0fe-f8c4dfb9709c", "comment": "Malware payload", "value": "9458b4459ba8c90817ef0e0775e93a14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832150, "uuid": "a99712f9-3661-4f26-a974-3f31f713e4ba", "comment": "Malware payload", "value": "beaa0cad81db02c93c77dc0c6d2a25736be5194306fcafd4d9c2045fc75eb7b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832150, "uuid": "1d30e843-263e-4f43-9de9-576ac156f240", "value": "T1BB83F719BB944FBBEC6BCC330AA9170134CC591A22B97B3A7534C91CF64F64B46E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832150, "uuid": "caaf65a6-6e65-4398-8c1c-8b5b8b90df31", "value": "1536:l2Csvuic4qPjcIMbDL57Y7/vj98ca+cZ7Kma1EONZ/:l2CsvuKqPMca+c23NZ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726832150, "uuid": "e259d2b5-1aa6-45b2-9bea-6664c03e593f", "value": 84808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832150, "uuid": "5f8c76af-085d-4f5c-b00f-b1bc880cb8e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a0cf526-7699-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726832590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832590, "uuid": "49145aaa-f0f7-4bc4-b747-f17859c9a1cf", "comment": "Malware payload", "value": "f7645a38ffbf63bce7429580b1aea9aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832590, "uuid": "0c17990e-5652-4cd1-8021-b0ebf2d87df1", "comment": "Malware payload", "value": "6057190ea3e2531ad5d67e762e53e0ed314a4df35c21fe76d580ba3a6be3e313", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832590, "uuid": "3aff2e90-322f-449a-96f4-7077b17aa3a0", "value": "T115533A17B540C0FCC59DC174572AB63AF673757D0238B3AA3798EB126E4AE614E2E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832590, "uuid": "ba5edce4-8ec8-4d55-8d10-406d8cef14f6", "value": "1536:KzGIfL8YS4+Q41druM/iIAyUvuxM3s+PQBuh8Qw6:iGID8XBQ41cQQyUEv+PVh8Qw6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726832590, "uuid": "00949a00-0f91-442c-9c35-c8e3dc06634b", "value": 63264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832590, "uuid": "ed9c13a7-07d4-49c0-808f-48dbd32e9326", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832590, "uuid": "147f450d-19e7-462e-ac62-3c002a29b21c", "value": "t1cc21272236aa05a4f0eff5527301e0645e721aa000f279f3e2b1b8fad7527430a75d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b344fa5-6f89-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726832739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832739, "uuid": "790afda0-2f17-4863-9970-582f9cf61d29", "comment": "Malware payload", "value": "e92707c5b799b98cd9e09166d58930f3", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832739, "uuid": "944cf11b-5e62-4556-b1c0-a99307250d06", "comment": "Malware payload", "value": "355a6f5e6e0357f3a6440ca408bc9c67899753e1662c0dd92ae6b6de892391f5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832739, "uuid": "a5faede9-552f-42f3-bbd4-792af136a8bd", "value": "T1B673B81E2E618FADF7A8823547B78E21939C378527E1D685E29CD6001F7034E645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832739, "uuid": "f118ccbe-623d-4422-9292-2f6ed6533276", "value": "1536:zvT16ORJA1M1rsYAuUAim9OrgT8YtKCe5dD/d:zvTYO01MilrgT8YtKpDl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726832739, "uuid": "01d6ccf6-5336-48ea-88ec-b81e8a0a9d84", "value": 80712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832739, "uuid": "f867e9b3-5479-4fee-9697-915ffd201d22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832739, "uuid": "e1878011-4457-456b-8541-4894b93ef39a", "value": "t1c9113908993863f49bb61d996bedff71e49170ef47215e378e00e9ae5a2dc429a00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ba3b00f-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726832842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832842, "uuid": "401dcb49-20f6-4130-81b0-a7450c21b854", "comment": "Malware payload", "value": "f314c4789d08e22f82ccce70bdf649b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832842, "uuid": "3eb671dc-2953-47bc-8ef2-547f7f927ff5", "comment": "Malware payload", "value": "60ccc1960f28cd5e89c5cd85c44c6a48b9fa83f3f176e3d39a3a0cfb45dd400d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832842, "uuid": "c17d5460-0547-45bb-b76f-9850a7a9be2b", "value": "T143E34B46EA808B13C4D61776BADF42463323AB5493DB73069918BFB43F8779E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832842, "uuid": "55d40549-67c2-4420-bea7-5fa3423622cd", "value": "3072:iNS8nVvTMbvYva5M5ZcPTnfhLsogQOuLF8M/9JmbXQE:iA8nZTMbwva5M5ZcPDflDOuLuM/9gsE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726832842, "uuid": "78f199ec-dd54-4bbb-aa87-1cc64449c60c", "value": 146173, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832842, "uuid": "844c3071-936f-4e3f-b41b-ce3b05fa95f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832842, "uuid": "8d518655-68a7-4768-ac3a-8bddd291ccc9", "value": "t1b931bb31572051155aa2ec60dded97a21529a7173744ab33ee3684cc241a0aaea36c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ae8ad7d-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726832858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832858, "uuid": "f4dcd7e2-be4e-4c72-9c92-e7596e3f6476", "comment": "Malware payload", "value": "7e144659c0feb47d8b6a3180798fcc09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832858, "uuid": "ee7879b2-2932-4930-99f6-7891280c9d10", "comment": "Malware payload", "value": "e86778bfb02461a8219a2d8ae1efda77ffd9d942dcff60c9eb95df537b2e14f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832858, "uuid": "dc6ab26a-de33-4beb-86b2-f68c43e39b0c", "value": "T1A1731856B8818A12D5D502BAFE1E118E33131B7CE3DEB3129D206F24778B96F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832858, "uuid": "f6cf0f97-2b9c-457d-938c-af53abce76c7", "value": "1536:RNnKdtxfldKSsxcp1ybpLWsagCCcPIDiMAxxVq0nfk5WYm:qdlQSycp1ydKsaiADVq0nfkgB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726832858, "uuid": "07019f1e-b610-4e3d-aeb1-ad8efc50dafa", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832858, "uuid": "af291ab4-19f6-4b75-a9d3-29bdf52b8ddd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832858, "uuid": "27eaa9be-5417-48f5-aab4-69e1ccb89ce0", "value": "t175e0c073c9180bcdaba842e7479f7323cd5a30e96e624c2b3f91bf9401238b402914", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29aa10db-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833149, "uuid": "ded23289-f7af-40ff-90c5-1dac36cbf591", "comment": "Malware payload", "value": "95706d3c060e268d9ca433c37716b7ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833149, "uuid": "ae373d17-6bf9-4a5a-9e64-c065cf69f695", "comment": "Malware payload", "value": "36c7192d61362039f598b93052c6b08da3c2806fe7f9ce9a1e61fdb14c95c7c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833149, "uuid": "c9301bbc-964c-4714-839b-c44af0553d95", "value": "T1B1030A92BC928D67C2E013BAAB6E528D336277ECC1DE7653DC111B10778A51F0E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833149, "uuid": "2e0ec56a-40f9-4272-9129-adfca789195a", "value": "768:IVHSWhsC+HRgdafcfl3dxrceCMy1KfYgpxMCBg/NG:Ih8ReaudGeCMoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833149, "uuid": "3f0187a8-7146-4534-b3af-1f9c13a96ef8", "value": 39900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833149, "uuid": "4080eed3-a8c9-426a-946c-8aed0c99cf75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833149, "uuid": "2c138d2a-d079-41e7-8bde-fdffdbf9ae69", "value": "t12fe06800fd65c61898cb6a70eecd47b49401231221678b148f54d6e0883f014a709e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e564fa77-7746-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833185, "uuid": "32329753-71ad-4686-854f-0da616d198f1", "comment": "Malware payload", "value": "2e7983a2ca9350bec5a7cd8063a4ee7b", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833185, "uuid": "a2577843-8acf-48cc-beb0-b565db3b0906", "comment": "Malware payload", "value": "f43b10da984024c06bc54c60e6df8f39ef5d170f110faef4931edbd71619e972", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833185, "uuid": "7806a0ea-4ccb-4c36-97a0-a72b5812f37d", "value": "T12513F1B3F736434BC96BB23611DFF1AE0A50633AC56D96E7DACA38137B5871062107", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833185, "uuid": "2b633224-b100-44ee-9f4d-35e28648637e", "value": "768:5v7Q+xgk6DEz6VnYoze0UwkQj1eSkMatrtRuS1KmJglsfv1cIlGynbcuyD7UGQRk:RXgVDEqO1AIrtRu6KD6dlGynouy8GyjA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833185, "uuid": "62313571-45b2-46a3-9ca9-b1ab4a5e9c25", "value": 43856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833185, "uuid": "437ad288-f51f-489e-b235-79546caf6c83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833185, "uuid": "242cd6c6-4ac1-48b5-930f-b49fc361af4e", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1726833187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833187, "uuid": "389860ad-b7ac-4bbd-ad69-f1bc841e18e0", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833187, "uuid": "a87348ed-7786-4c41-8696-a57869571b7e", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833187, "uuid": "cbc25452-9d04-4c89-9195-d529e3e80970", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833187, "uuid": "ae476958-f8f8-4afa-a300-af1a665cb618", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833187, "uuid": "9f59c0fb-3836-46df-9db1-abe8f1f85bba", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "978f4ba5-7690-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833371, "uuid": "1b44d740-0082-40da-aa2e-896b6c88ddec", "comment": "Malware payload", "value": "2c2915fb705d55b7ab2d14f37d557542", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833371, "uuid": "c5a418a4-cc14-4a1b-8d2b-e69c06eafbd4", "comment": "Malware payload", "value": "3cabfe4fdbf9bfb924a6f5b0059f9b98a2a77c81d336eb989e32c1546c37b2eb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833371, "uuid": "ebaed26e-fc22-401f-92f2-85528af21bc3", "value": "T1D9A1D78A731157B25F15EE6EF72680E63142F2C14D12CFD4748C60F679AAEC499C0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833371, "uuid": "824d300b-d2a8-45e2-b8d4-c57342f2b780", "value": "96:1xqtubd3crchwI6RajRrgfIw9L7b2T6kx:fzhwI6RajRcfIw93b2T6kx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833371, "uuid": "83542f28-fb7a-4f65-b3b0-6a93ef5b0de8", "value": 4709, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833371, "uuid": "a4e9e0c3-90ba-48f2-b583-8f513e2427ba", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eedf6945-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "579a0bc6-eaba-47f6-acfb-803e37c7414e", "comment": "Malware payload", "value": "a9158fe0580c201214f6417a3fd3d441", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "aa625a31-a1b2-4a49-ac7a-458386afadbd", "comment": "Malware payload", "value": "4482548958dceffdb12a303c7632bfb395436df385fdb5a2062fa08248fc5cb5", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "b9b4f337-94b2-489a-b292-6a806eff9d5e", "value": "T1A5735B42B30C0947D5A35DF07A3F27D193AEE98112E4F684791FAB4A92B1E325186F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "eaef70f1-d798-4e93-8605-a53a6591ff72", "value": "1536:+vgs0zO4jVa+I/DE4cp9eFETMI3tST/O+yfVB3XV:+N0zjIgLegMIdSVYnV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833786, "uuid": "1bb607bb-3781-483e-a05b-e5c510f14008", "value": 75208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "2ae7d400-629f-488c-a5c5-25c5921283da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef199e07-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "cd68c2d1-c6f8-4ac5-b951-613eae92e241", "comment": "Malware payload", "value": "58d4f45022989b229046d886613cbd3d", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "abae55be-d097-480c-99bf-6c4b0af9c7ed", "comment": "Malware payload", "value": "6cea4bd47911e195ef47749e30436547e3d25826b3eed1a95624398b4c80bd34", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "8748a36c-fd51-47d2-875b-218c4a3a970b", "value": "T18893E61ABF610EFBD86FCD3706A9070535CC551B22B93B363574D828F64A64B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "5ac9020b-8edf-4c7e-a867-948ab11f7db2", "value": "1536:0RgLMiV9IZ6OtcqYhdpAJx/WHN/AzqPTZk/vR0piSp9ryIjsHqj//e:0RWMaob/MN/AePTY03KHqj3e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833786, "uuid": "67cc0e4c-ded1-4f0f-b0d0-3d2b406c6ef0", "value": 97340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "d852877e-ef0c-4a4d-9bec-c530436254cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1339385f-50b5-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "5d742961-1021-48e1-a921-3eba28b19a01", "comment": "Malware payload", "value": "7b997d8db612e7580f05d8c5620d9f45", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "37038c27-1a5b-4acf-8d2b-19f24eb3222b", "comment": "Malware payload", "value": "575d64f0a0a52af5be457d4c27bee704eba4aa4465179eed8735a7bae5eba454", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "1042da18-6734-4475-b2a9-44e358b296f7", "value": "T1B483D64ABF610EB7D86FDD3706A9070535CC954B12A83B363974D82CF64B64B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "9620cc48-518f-4ba0-b2e5-580dafa2c695", "value": "1536:vexOiWlptdc7LZGbABkH6J4Iil8Zx5AmyEB6+hQ:vexOJf0a6J4bl8jo+G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833786, "uuid": "1ceba8b5-3182-46f1-a113-2f3e06e98da4", "value": 84900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833786, "uuid": "1437708b-1dc9-46d1-8278-f9984b4d3ec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c61ee88-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833787, "uuid": "46e079fd-6795-4571-bcaf-f72ab1fa0400", "comment": "Malware payload", "value": "7faa589cc380183e1f9230c9c3b13321", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833787, "uuid": "a6053a85-8fe7-4980-b489-a5130c4a0c9a", "comment": "Malware payload", "value": "3463461b7c1902438f9fcb1a3716aea01e93636c609367924ebba6531f3f22d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "03991f5b-18b5-4200-a92b-135c0d7cd032", "value": "T198A34BC6F501DE7DF84AE63748530D0DF5B2A2E00FA30A2363A7BD67E976195280ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "5b9ae556-c3ec-4367-9df2-9eedefd6adfe", "value": "3072:jEis6Jo0UAn16PtqqycQeuacWjcW0JcWcBgkTkIzfHTQZieTBnhe:jEd6JnUAn10ecQeuacWjcW0JcWcBHTkC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833787, "uuid": "ec8789cf-7ae7-4a66-a691-67cce328557d", "value": 100928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "8d450eeb-1a52-4013-b7fa-ea2bd041bc84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0b1f841-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833787, "uuid": "0fe5782b-8531-4db0-bad3-004c20581f98", "comment": "Malware payload", "value": "ffd95206a459c5a72cb8e5ea15f4cfc1", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833787, "uuid": "4350041d-d8af-4420-a8f6-94e167ebdb23", "comment": "Malware payload", "value": "00e030e49a165201d6f956fb33ec174e3d80f6877c6a5d4a7198d6caa560836c", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "873b8a6c-5127-4248-97b2-f22825e06899", "value": "T18A633C81FD809B12C6D122B7FB1E428D772653A8D3EE72139D25AF20778782B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "13e8e44b-b60f-408a-90bd-58870c482fbb", "value": "1536:nCJklXVmvncCE/F/5kwTRKCywaxiAxtXE+IuQ1v1OXS/f:CJkXj5WzCywaxiAxRH7Qjj3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833787, "uuid": "47f4a642-cee4-4622-bc0f-3a4e9c1f7466", "value": 73124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "f6a99785-b157-45f5-962a-acad61b1e664", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "9e29628d-9825-4758-80d1-2bdb01208b0c", "value": "t12ae020701d8018cf6f91588001ab737ea81476bb7ea2359541c59f9d40474d1f003d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f055cc63-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833787, "uuid": "8051d15d-b901-4147-b7be-f32b6d8fd1c4", "comment": "Malware payload", "value": "88d66f90a1df9a4ae460479eb42dc065", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833787, "uuid": "2b6a8a8f-5f38-4f72-a2c6-276ec99b9f09", "comment": "Malware payload", "value": "b1dbc039b9569fc72c71d7aa4ccf1d14433ef257fbf825240a450c4d0978de4a", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "6333bd7c-450d-4f50-9fc1-446783ecd52c", "value": "T189A31946B9819F11D4C631B9FBAE414933136FBCE3FA71029920AF6427CA9DB0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "6f1dc102-01c6-451c-9707-b0ae514ea317", "value": "3072:25ZqU2FGRaXk6VC36gueP36hsg0IzRNP:25Z+QRaXk6VC3Puc6hr0+RNP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833787, "uuid": "65890bd3-c217-4fcb-bc23-0ef79f93d0d7", "value": 101048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "aeb03350-d3c3-4654-9ca3-3875121a8f6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833787, "uuid": "9642766f-7496-4542-9464-8574acd5de60", "value": "t170d097a04bc467c9bad8c302c3c9a03eed3cb23c7b004636913ac06b86121e0a8268", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0962473-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "488ad4eb-7dd3-4269-af61-e17290ffbc43", "comment": "Malware payload", "value": "98e0e79a68a6f518653105164ce45b9c", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "e89df5b6-5f8d-4049-bcf2-424e720eee57", "comment": "Malware payload", "value": "b9dac27c9c3f5bd6a56619534fd729d18cdee0aaff440c5adb92b3ed758a8d18", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833788, "uuid": "3276fd14-e832-4aa6-9291-52e35f639b5c", "value": "T1E2832A56B8819B11D5D112BAFE1E118E33131B7CE3DF73129D20AF24778A96B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833788, "uuid": "1389df28-f525-4cf3-989c-7ba16f2776b2", "value": "1536:V0nMDnlHuSI5Faa/GKUmw1a1YtkvQPMOiO8GfwsIf7525LYd/Y:zuSIL/dUmw1a1O8GfwsIf12hgw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833788, "uuid": "fb6523fe-d150-44f3-bf97-ff3c89317241", "value": 83864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833788, "uuid": "b8f88982-17f8-44e6-8677-d6f11f7481dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833788, "uuid": "6df24663-58f7-49c6-a0d5-21c8e6bc7412", "value": "t110d09773176220eafac48306504fc0cb38ca7aa83f0028f966c7072869f4008c2230", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d5be861-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833789, "uuid": "90c28a51-2382-405f-9f28-ba283aea742b", "comment": "Malware payload", "value": "9c7a304ba9975556a9535ed56c6054a4", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833789, "uuid": "e558e6b3-4e37-4e47-8edd-cc8adc97da2f", "comment": "Malware payload", "value": "a1510609f2b0718e1ce2f3f419a8f9dcedad80026224c36040e7c8f4c3b36764", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833789, "uuid": "c7643c81-0ce6-49a9-82f4-ca3bbb3ae1c7", "value": "T1F9734B41BD809A13C6D112BBFB2E428D772753ACD3EA72039D259F21378B96B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833789, "uuid": "4f142fb8-2ed6-4ee9-a610-0efb69abd7df", "value": "1536:V4ykTaPWfhFxT5ABCwz8lqCN9cV+95RKbmObvi/f:V4TBfRYIlqCN9cVIki3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833789, "uuid": "e789125a-db39-4f23-a8a6-6f6d2a8737e1", "value": 76588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833789, "uuid": "9fbd2c14-3f51-49ac-a1cb-b89e1c34b7de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833789, "uuid": "83d56a44-ae98-45e4-8f04-bec92893eea8", "value": "t1a9e0c6b0d8892cee7be0eec2006777c824a83a7a2340208444cf8f88008a2c0f0128", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4dc4ca21-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833789, "uuid": "080833ec-3f75-4c01-a56a-f9d81114cb1b", "comment": "Malware payload", "value": "6becfa2fba7b4d4aae9e459f01a4321b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833789, "uuid": "d97da215-c120-478c-87ad-5ab50310a626", "comment": "Malware payload", "value": "911eb21f5909dcc96395e955870c11493661c47b5601e045eb7ac35502170598", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833789, "uuid": "316b045b-dff0-4247-9ac9-b211570952ac", "value": "T18DE34B067FB00FF7D85FCE3702EA4722248DE85523926B727138ED68B64B58A55D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833789, "uuid": "d0e7eb91-509c-4175-a137-495374ab8fe0", "value": "3072:xXi2uwfdAaCSjTpInSKbmGkSTPcuwbZn+ATdG:xXi21OmjTpBnycuwR+ATdG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833789, "uuid": "d94de266-de71-460e-baff-5526893d59d6", "value": 152503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833789, "uuid": "917a5080-9a1c-4294-85ad-b23bd1ab41c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833789, "uuid": "b21c97fb-8fac-4efb-b614-0120d0188eb2", "value": "t14221e07157315625ad71dc94d8ee97b2152c93135348ef33de36848c281a09eea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e165527-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "a72107b6-75ec-4510-9933-bde53235a195", "comment": "Malware payload", "value": "7baf770f685f3d5768ed93f9f93a6735", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "3b429180-9f67-4a99-a95c-b154e891d201", "comment": "Malware payload", "value": "3ad36715a693becb08a93ff203d7e0e11d52bc36f58194dfa0ee31db7022260c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833790, "uuid": "80502a31-5668-41ac-ba6f-2f5ca5b3555d", "value": "T14EF34A56FA414F13C0C6177ABA9F424A33239794D3EB730699287FB43F8669E0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833790, "uuid": "026bd902-853e-499a-b365-52fe53897a1d", "value": "3072:yjFVrWRVgcqaHaGwjo7D4s2AiEglYSwbZn5d6lhPM/9m5s3b:cFAbn3HaGwjo7DV2A4LwR5d6lpM/9m5s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833790, "uuid": "de5a3f3a-c906-4291-ac81-f91093466a66", "value": 168445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833790, "uuid": "836f5ba0-a09b-41b7-ab0a-77feabc25d6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833790, "uuid": "1fb8da7e-e13f-4e8a-8e07-3d018c5bf72b", "value": "t19121fe7157316225aa61cc94d8fe97b2112c97131348ef33de26808c281a09eea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e6da2db-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "4082cf88-4258-4a7a-8128-849f36502a58", "comment": "Malware payload", "value": "bd7d2bb28c4bf7b37013761d14bbfb21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "863a8543-ae5d-4056-ad87-7ac51a1f19a0", "comment": "Malware payload", "value": "335237147446803507780e7efd8d3ad52d650d24d794a59498d749b9f0c0011d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833790, "uuid": "ced673e4-44c9-4df3-894f-b39d2b00526d", "value": "T16CF34A56FB414B13C0D61776BAAF424A33239794D3EB730699287FB43F8269E0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833790, "uuid": "1ef2a8a4-06af-49e2-86f3-efba207d6bbf", "value": "3072:yjFVrWRVgcqaHaGwjo7D4s2AiEglYSwbZn5d6ckxV7m5s3b:cFAbn3HaGwjo7DV2A4LwR5d6ckxV7m5s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833790, "uuid": "2a3c6331-adc1-404b-b2ec-42c8d035fe02", "value": 168445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833790, "uuid": "90b327d4-5e4b-46c3-812c-1ec71366285a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833790, "uuid": "7973224f-6ecc-41b6-b5e3-c87e221be4d1", "value": "t19121fe7157316225aa61cc94d8fe97b2112c97131348ef33de26808c281a09eea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bc4f7f7-761c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "1b04793c-a9e9-437e-b96e-c8dcb4e65a40", "comment": "Malware payload", "value": "6d7fee909fa41f5d43678f0b9eaaa753", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "6c66225f-c715-4a9a-bb14-37cf95232636", "comment": "Malware payload", "value": "8d9fabc00dc3ca5e07e2d9dc9b162c09c1c052c95919c635d2248f93c09cb7a0", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "366689e0-2ef9-4cbc-83f4-2af59e6e66e7", "value": "T1F1634B0BB582C0FDC899C174476BB53AD973787D0239B2BE67D4FB226E49E211E2D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "d2fc3954-1021-442d-9073-504b9588b2e4", "value": "1536:GYY1d61jU63QMLtL7cKbV/SS5FmHYAK0k1M1YR:hyd6CyQMLtEKbV/SgmHYAKDMyR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833791, "uuid": "55233702-fbbf-4997-8e9e-214cbfc26f3c", "value": 71536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "66834da4-ad10-4d9d-8c73-c0f7869ed716", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "ed536e82-8500-4ba8-8d0b-b702d3cbedfc", "value": "t1982123b23a691890e0fbf473a346e0105e350e2414e574e2e5b2b9fae721b440676c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d0dff3-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "f7b2cbe1-52e9-4408-b9e6-ef7dbdab5704", "comment": "Malware payload", "value": "7495ba40d352b80e7e4677fa79cf0ba9", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "04c86eea-9adb-471e-9e2f-9edf63c04283", "comment": "Malware payload", "value": "161f0a4036138d08c737c18adce95270431438b7b0057de6a20232e7b023dd77", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "9bc48f74-c87a-4b59-9844-bdd4452dc9af", "value": "T12C536BC9EA47D4F1EC1709745037A7338672E93A0078EB97C769DA72EC53A11E61B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "5f5375db-d682-4407-a613-905e3196fa14", "value": "1536:Ki94DP/iaVEeHGmO8fp5lnKp1/hNWStSZ+Y/:xa/iuXmmDf1ncJhev/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833791, "uuid": "87fa7a7c-2385-4d93-a3cc-59be1f3febd5", "value": 63636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "c6ead6ed-4572-4ff6-af69-3dd27828b3cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "aa195993-ee54-41b8-b190-450bcdd8c225", "value": "t10e31d4f92dbe04ecb3d0a888c21eafd35b6de5375aa171b841b5285633f3c1284698", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ec81767-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "693fafa5-31df-488a-8b15-c51b8360bf63", "comment": "Malware payload", "value": "90209ca1e3d970e0cc4f0093da238ecc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "6cd1f560-fe93-4d2a-81b2-10ef12cf3d5a", "comment": "Malware payload", "value": "dac1970d4be5974f0846bf88b005ba5b0c2c1dff6f780a23104f51b5941ab38b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "bfb143dd-0373-4184-b8f5-65d5c1fd9060", "value": "T1BDF33A56FB414B13C0C61776BAAF424A33239794D3EB730699287FB43F8669E0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "8c6d2823-3f43-447e-8885-6d5dcf0613bb", "value": "3072:yjFVrWRVgcqaHaGwjo7D4s2AiEglYSwbZn5d6lgTxVm5s3b:cFAbn3HaGwjo7DV2A4LwR5d6lgTxVm5s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833791, "uuid": "15df01e2-aa63-4898-a500-64f1c629f52b", "value": 168445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "ae082dc8-f7f1-4ee1-8e3c-321e752ac44f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "fc1e1f88-8131-4ad8-8468-e3e2922b0e20", "value": "t19121fe7157316225aa61cc94d8fe97b2112c97131348ef33de26808c281a09eea3bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4edd97e4-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "75fe256d-32dc-472b-b863-263e823b43bc", "comment": "Malware payload", "value": "cd685d53d76c680c58def360585a3240", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "63cbea73-3526-467f-84f5-8880d7930bc0", "comment": "Malware payload", "value": "3e99970012a08beaf26ca0ec454ba30b5bd74760571678fd526d9d6de34c9b4b", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "0704969f-53ba-4371-8229-78b957cd03a7", "value": "T14493DA1E6E618FADF769C33147B78E21A35833D627E1C681E25DD6001E6038D685FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "1e98cdba-166d-4a9c-9a46-b6136932a4b9", "value": "1536:Ox3jfvRRQHOn06Fz6F1KFYTVRkmGuV8oeZZPLvVk3p/:O5vRRQunQRkmGe8vvVkZ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833791, "uuid": "84ba77c4-e9a1-487b-9d47-03da737dcaa8", "value": 97260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "ac2a33e3-6c75-480e-b4f3-b77709e502c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833791, "uuid": "b4b5942f-73ea-4b43-bef0-b7ab38ee30cf", "value": "t1ad210b4c897823e497711c9d5bedff36e59130cf46256e378e10e96daaadc429d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29e71c2b-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726833810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833810, "uuid": "908fcbd3-6611-409b-8b4a-54c5dad73f75", "comment": "Malware payload", "value": "6c7b4a201ac4636e8919af0832437b85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833810, "uuid": "56e8add1-43e7-4f99-9ccd-c8f7a62f1630", "comment": "Malware payload", "value": "5f840514beddd7b09829d7c8578ca67b3f164711aa7e1dd7a776ab31c998262a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833810, "uuid": "71940927-fcf3-483e-be74-d4b6b7ecb64b", "value": "T132533B02731C0947D1A35AB0293F57E093EEAE9021F4F68C351E9B5A9275E3A1287F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833810, "uuid": "2024515b-429b-4852-8e8d-abdf288cba67", "value": "1536:X1DQCmaiOodQFzpoYYkPmNp6Z8IL+1ICjp:jBACxqY7IE8IK1jjp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726833810, "uuid": "7a490e94-a58c-4f10-9983-fb5b9913fc8f", "value": 61104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833810, "uuid": "de729475-a516-454a-9bc7-442840f80fde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "887a861e-7699-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726834156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834156, "uuid": "bbea44b5-657d-462b-8f63-fa84f00f0d15", "comment": "Malware payload", "value": "a6d3051d6fc9d820361cc4a68ad8ad58", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834156, "uuid": "b30d0ce9-fa02-4526-8e96-11be9daa0770", "comment": "Malware payload", "value": "102dc661d3c04c9c2c577ab17092402a0d9a805fe46c18a792227008a0b82328", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834156, "uuid": "0defc70f-58e9-4c6a-bb23-9637064a4a20", "value": "T1A7634BE7B800DD7DF84AE77B8413090AB271B35101931F3A679BB957AC331E85D66E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834156, "uuid": "303f5d4d-70f6-400e-94ca-a8d72fffedc8", "value": "1536:JIrA50tU6IJ2iuhD8iIjoi+UI02OTWSgoIWmd2:JIE50tnIJduhhxUj2IXK2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726834156, "uuid": "8c65ac5e-4c91-465d-8b0c-bde9373193e8", "value": 67528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834156, "uuid": "77a2c4c3-5a6d-4635-bf08-08fe87430236", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4661e59-7749-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726834445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834445, "uuid": "76363ba3-3c03-4c2e-a064-829e162d0b01", "comment": "Malware payload", "value": "5f1ea69f876e6c0b3f52c49cb56a5933", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834445, "uuid": "4be40b76-5026-4dec-9632-46a21299c51b", "comment": "Malware payload", "value": "bf41950c2b87050f69bbcb6cb810e990d9a1f60a7109e8a3ba4668f2e397db96", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834445, "uuid": "bd4c1999-de8c-4d58-9697-379ad3f78098", "value": "T1F89423762FDCB414F5941872B7F3E3248972FBA0B4AC11D6305AA69ECDD7B3006A11", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834445, "uuid": "3867fb50-6036-4b28-a9ad-79c21499fb55", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834445, "uuid": "eb5787da-96ce-4919-b17b-fa308300693c", "value": "12288:DuSEc/XKSAotoNQQGqlWAmyF0x3EGXY0kD:DIcPKTotHQ5Wzp5SD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726834445, "uuid": "4493fbf2-12d7-481e-9601-45ed0b5a1d49", "value": 411512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834445, "uuid": "cfe6a90f-2e4d-45d4-a205-64e8ba4cec60", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29daeba4-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726834472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834472, "uuid": "74ed0fac-cd49-4514-bf02-162c458ccbff", "comment": "Malware payload", "value": "e5563fd4b500fd68c0242bf3bb2256de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834472, "uuid": "812c33af-bca0-4cf8-9472-eec34da5d2c2", "comment": "Malware payload", "value": "a91ed4297192242434f2a5a38d4eb00d3c5a9e2c09a92a511b1d06a2dbbef1d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834472, "uuid": "a4ba3f33-73da-4a3b-a36c-c6d8feafe3f6", "value": "T151634A22A9761D27C0E0F97A31F74324B2F2579D25E8CA1D3D710E4EAF61B4022876", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834472, "uuid": "963175f9-d4fb-4c75-a977-a92d402ea5d4", "value": "1536:8pTdyuj+iSmcgPc8fZebdwVu1qQ75FtL/t:8H+LGZuHqQVf/t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726834472, "uuid": "fa984073-4277-4b96-a1f8-aff5b39e884a", "value": 66880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834472, "uuid": "d0665358-03d7-4e28-bc9a-df7ac5cb01dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac054e98-6f88-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726834669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834669, "uuid": "62307c54-e658-40d3-8524-1e5c21901ee3", "comment": "Malware payload", "value": "048af0f33f1d94915d634b19bd159964", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834669, "uuid": "f3e69b5d-7a0e-4226-8015-7019c8fbbb8b", "comment": "Malware payload", "value": "80db654728e36088c332abd739fbb66410f8e49a55bdd360c041bf94b8d842d7", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834669, "uuid": "1923eb81-9e80-4cac-939f-8f406623b187", "value": "T1B3532980BC819A13C6D052B7FB5E428D732717A8D2EE73139D266F11378B92F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834669, "uuid": "dbad33ed-b1f6-4b28-9a0c-f3c9d599f15c", "value": "768:rdmLofzkz4IikDXNvCjCcetSuoTwA0RECJz/NRGbkXHvuMV/A8KqT1L91SVLEvaA:gLQc4IZDQetkwFKSX5Qqd9oZEvat1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726834669, "uuid": "710b6827-c964-4c96-b79b-6c8cfd775dad", "value": 64080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834669, "uuid": "65befc7b-c8cc-4539-a37c-6dad40ff8f53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834669, "uuid": "5b9b4637-163d-4eeb-a13a-2f6e2a1ea2f5", "value": "t1df01ab2444c409cc63e081a6c0cf227702ac347e1a1525ad63a2fe0f81a7971b5348", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bc1b9ec-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726834689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834689, "uuid": "ed0e3f18-e539-4af3-8e36-bc7f2a957c32", "comment": "Malware payload", "value": "06e3ae9bd59b025cb7181795f58aae35", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834689, "uuid": "93fde0e3-62b6-40bd-b5be-0db1da47b484", "comment": "Malware payload", "value": "351977f033a333c54b7ec6f1ce1effa9619f3840a0326167c89350a4643912e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834689, "uuid": "de9aa06e-34cd-4cba-8944-24c10e02ab4a", "value": "T1CE3339C4E64BE8F5FC56067421B7E3728A73F93A0029D997C369A432AC52A05E6573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834689, "uuid": "de11b148-de9d-4e37-b903-45e01bba9622", "value": "1536:koFZyQDHb4T1WhmlDnEwLw5rL23W5B4OJBjb7Sx:DyQD74T1W6IwLE/p5B9J1b+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726834689, "uuid": "225f7e7d-7c09-4b18-b072-568eec09085d", "value": 54352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834689, "uuid": "65233661-5ae3-4e2f-acf2-2095339d5213", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834689, "uuid": "117d171b-4177-4d63-912a-95fa4b8709d9", "value": "t14921e4b72e760cedb3c0a84cc31a52d31536d27b5ab071b901726c9133f2da180b9c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6751cb8c-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1726835765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835765, "uuid": "ad402109-93d0-4fec-af44-93923c675b2a", "comment": "Malware payload", "value": "7192615ce8fb53fa1949264b77d542a3", "object_relation": "md5", "Tag": [ { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835765, "uuid": "2859f016-e9b9-47a5-bc40-5840ec4c7564", "comment": "Malware payload", "value": "e95fcc11a0ef7685704cc635b23f0a14ff59323af4a56df58fd9fa30c8b1a962", "object_relation": "sha256", "Tag": [ { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835765, "uuid": "5d6c4b00-2d63-4d05-b774-9a798f5e6378", "value": "54B31813B7B1DABEC08252B12BDB92F19423FD7D0732622B33957DA51B388D96D59302", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835765, "uuid": "45c0a52b-9e3d-4f40-b547-88be6abe0da6", "value": "3072:td0wrSAewzi+Xn+8Uhw6W+aPWJmDk1c8xF6KjW:7fO8IBrJmDk1c8xF6KjW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726835765, "uuid": "087a7fa6-e9a7-4a46-a8ed-6b694e16b4b7", "value": 114825, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b2cfea3-774d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726835825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835825, "uuid": "a626528b-01fe-4e38-9892-5ad65d911efc", "comment": "Malware payload", "value": "9bcf6be0b4b8eff680b0d8539237a496", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835825, "uuid": "7c336c26-8879-40fc-95a4-00dba2de6ba5", "comment": "Malware payload", "value": "c7f39760d17bd7c8c08ca2cc7c88e825526b5149c80543dbedacc052fa9ea479", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835825, "uuid": "62674f32-f3c9-4a93-9b04-6a56c173fac8", "value": "T19894236493CE0145F9278AF0B59AB2369F34F5E26A464CC723DACB0195C530669BC3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835825, "uuid": "1c82e067-f4ac-4e77-8261-4bd653620132", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835825, "uuid": "c8f29121-18eb-42a6-a0ec-33fbcf9b3f3e", "value": "6144:PVDE42g2K7jOz5rVp+9Mphcr4vP9UXVFwzwbnaTDW+QSOBiQglLEO:JE5g37u5rVLhvUFKz+CDWV5uEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726835825, "uuid": "81f85c9b-6c07-4095-9c89-fdffbc7e5769", "value": 421280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835825, "uuid": "b86a9cd3-9f68-45c3-bfcf-1b6d5d07d09a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "207e0ffb-657e-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726836606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "1da99d67-4d5a-4609-ba88-878e1c49e5af", "comment": "Malware payload", "value": "db2a59a1fd789d62858dfc4f436822d7", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "329e911e-da8f-4e81-8651-a0219af021d6", "comment": "Malware payload", "value": "d458b28ef0a1a582f6a116f38cd38815b83f9f03e1efd3f2a5c00535f52899b3", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "eba68fff-9ff5-429f-894e-7da276aa994a", "value": "T1FBC012E500D78E02800F56DE3652519AE0D0F54830C04F8CF8C710375418918F0056", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "3c7bb7cc-749c-40ba-99e9-b06ee70a0215", "value": "3:zBMXBg2oBVW5FC0FbROLUSiaIVOeFGBzOd7xFLHFYQBGmVW5FC0FbROLUSiaIVOs:tf2sVW5FC0FbPVOaG0DFYQbVW5FC0Fbh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726836606, "uuid": "15c34cf1-5d81-4444-9675-145c605c1997", "value": 191, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "c89b2900-3f82-423f-88a9-13ccdb9e52c5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ff2131d-74e1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726836606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "cf4c6667-39cc-4ae2-b7ee-37ae16d824a4", "comment": "Malware payload", "value": "5a4dfdac9c9007ce9b19cf0800562177", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "ae21c151-df46-48a3-a40c-8815abc058dc", "comment": "Malware payload", "value": "0483616b842f63d0c68bb41bfcd37a6c8192aeeb7b6a2da98128fef71007f6ca", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "c190c072-dfca-4d40-865d-37f8c232f652", "value": "T134115489E5D35DB07CD893273D6F4990F5C4B8D36AC45F4AA4DE3AE4548CE04E4326", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "b0081a0f-b29d-466a-9e9b-238efe6e6afc", "value": "12:pt0FfnR/0FEDR/0F8MR/0F8FR/0F8nI9R/0F8Hr:gfeF85808nP8L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726836606, "uuid": "b11e65b1-28d8-403e-8015-0b2dbe60fe0c", "value": 1009, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "e1ee6c40-0652-4c94-af72-8ce4e130bb50", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ff7a018-74e1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726836606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "3b0ce530-865c-467f-9e49-d5df55bbc39c", "comment": "Malware payload (Mirai)", "value": "1de99108308f3d5781823342821fcb7e", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "8e147ea8-cf2c-411f-b177-14d3297903a8", "comment": "Malware payload (Mirai)", "value": "751d2ad9a2e5345f494e62045c52d4440ec800743e020d3fa48cd482730c3c43", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "ab2cacf6-75cd-454d-9c4a-65e56560e33b", "value": "T1A8215CC510D2ABB659C888067BA357BDF08A80DD3E2FEED8D46A04DA67667E3F1402", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "42636116-2e71-4554-bf41-084bd497a03b", "value": "24:IeBhiI0B6G8uB1nsBSK0s0RWvB2spKaB1dWBlYwrB5rjReBVUSBVI:rhipP71gSQ/2sT10lXV8VDVI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726836606, "uuid": "52b5d982-13ae-4fde-a74a-f65de7d8a024", "value": 1272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "53d2b8ee-3e93-42b5-b320-daa618f9ef10", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fe3792a-74e1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726836606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "d4325684-8427-469b-9ed1-503b684cb94e", "comment": "Malware payload", "value": "89d98b9243180c2f6c12686538e10c51", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "42378b17-ee55-4873-ad45-42bd5ad034c9", "comment": "Malware payload", "value": "c4210db033232582aa7fa124521f5d39e2a53d01d089a46497693a6c265e63d9", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "65aef5bc-244e-4f79-a6c1-e515a119a404", "value": "T160F092C800D309B37CE908B3396E8D9070D0B083A0D4CF0DE8EE78E5154DF4AA2067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "a75692f6-f643-4e95-b2aa-b03e825bdd38", "value": "6:zNmz6O2z70FbIcLxKNz6O2z70FbQNIkCRz6O2z70Fbi0KXxz6O2z70Fb2boB:BR0FEcNKNc0FsNIkCRc0F1KXxc0FS+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726836606, "uuid": "6c1f7b76-afb9-4a4a-aabe-61933a99c56a", "value": 500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836606, "uuid": "05cdae1f-572b-4149-8c41-7d2b452073f4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fd12547-74e1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726836607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "bd66ee6e-0002-42c0-ab82-b0d2ef38e60c", "comment": "Malware payload", "value": "b089d93577a6334b01e57ff440b1bc61", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "f54b3d78-8e6d-4bca-807c-33e3c44c98ec", "comment": "Malware payload", "value": "c028d5a9e52da3807460d61feaf494b9f7c43bf5480da756772afe7e133c7012", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "44dd189b-13ba-4c71-aca4-ae3c0deac3f7", "value": "T1E4011ED524F368B26DE4A872717F8A6071C8B08664C5EE89A4DEB8E5D48CF14AC116", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "ee1d7b63-68dc-4bd2-8fca-d8d876832cec", "value": "12:QogZgU8F8kgRF89SalLKLN+896NIoLlL89g+895Duzo:QoS58OrF89xKLk896NIQlL89g+895Du8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726836607, "uuid": "5ab7e943-bfae-4d61-941b-fea34fa1cb79", "value": 789, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "a6b11f73-7506-41e1-94f5-7d7c1e60b95f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fd4d962-74e1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726836607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "8a1bcad2-7036-4492-a3c3-25c71f0a471d", "comment": "Malware payload", "value": "1d82164847e433757c289bfbedc286b6", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "ff21fd4d-fde3-4630-9113-41473a50df9c", "comment": "Malware payload", "value": "84868fd886375bee618570aea08547779af8d7903818de17766bf0dfa5a46b4a", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "df4d7b16-b646-4f1e-aff3-7badfa61a79f", "value": "T10BF054DB50976997C898DE4A364248843081E38B206ACB8DFCCF10395CF8728F025E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "ee12202e-3b89-4920-af7b-cf9630efd1ba", "value": "12:98LAtz3kNIMekYtzvFatzLcbKMYtzc1tJSTpW1to:qLAlkNIvkYva6Kta1XSTpW16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726836607, "uuid": "e8639f18-021f-4bc0-89de-9ec7e69aed20", "value": 495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "742ee64f-a3e7-48c1-a67b-d2b267dbc098", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ff81834-74e1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726836607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "1473eb37-69e2-4f31-ab23-6d8a3df7f7ec", "comment": "Malware payload (Mirai)", "value": "a0546ffd55eac2d51a766fadca21336f", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "f289bef3-7ba9-454c-a226-1af7f239bc42", "comment": "Malware payload (Mirai)", "value": "c349f511ec4e9c162b4a4c36616ff00816fb454263ab7a263b1ca1dd9d6860c8", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "afe113ff-62a6-45a5-82d9-cfddbfa457ab", "value": "T1BC2100D600D25BB64CD4C9063BA3497DB0CE85DC2E1BABDCD8AE00EA7752BA3F140B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "e1eb05a0-f8de-490a-97fb-ff13fe45258e", "value": "24:jwBhiiZB6GScB1trBSK0s0rjB2spymB1HTBl8eB5rjr3BVQCBV2:whimPB1bSQG2sd1tlPVJVDV2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726836607, "uuid": "4b567b83-2815-42c6-9ee7-3faaa53f3ec3", "value": 1188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726836607, "uuid": "beff6a0f-35e2-4ddd-bcb9-53ee873ee309", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b9138e1-4367-11ef-866f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837025, "uuid": "9f5821d7-e28d-4f83-90a0-4eb3872d79b5", "comment": "Malware payload (Mirai)", "value": "70705918caef654e584805fb35a22d7c", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837025, "uuid": "fc5243f0-bd11-4db1-bfeb-cf621680f06e", "comment": "Malware payload (Mirai)", "value": "f148725f1d1975b9e28de94ee949d807b74665dd90548c6e7c856cb799b13456", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837025, "uuid": "61dd7785-5381-46eb-a7c0-549c5fa4d04e", "value": "T123533C85FD819A13C6C4227BFB2F028D372653A8D2EE7213AD255F21378796B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837025, "uuid": "158dde5c-740e-4288-83d7-5afe97b114a3", "value": "1536:oh3MISslmCCUR56TfctMcAOOh6FsRO5E9h+:ohtSG6fctMcAJRdc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837025, "uuid": "bb4355e6-53b0-4fb8-b3fd-7b61bc2e9efd", "value": 63016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837025, "uuid": "0f5de207-2191-4c2d-b567-9f5ab6fa0950", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61e2fd6f-5fb9-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837025, "uuid": "419c523f-a23b-495b-9b97-96baedcfcc85", "comment": "Malware payload (Mirai)", "value": "c66a964fe460a10d78d61d14db000ce7", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837025, "uuid": "1b5730f6-7efc-45ef-96ac-2aedf9a2746c", "comment": "Malware payload (Mirai)", "value": "eb344edb5d9c5b75a01add12f259edc44cfb3f320a4a317e9e8b88745e8b128a", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837025, "uuid": "dc24991b-0d26-4dbc-a48d-01173af0bbe1", "value": "T19C53F986F991C957C5C862BBBA1F42CD372613E8D2DF33079E15BF153B4A82B0D2A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837025, "uuid": "82fbe833-cea8-47d0-8e67-8cf6a3a51712", "value": "768:eaLu2vD4H0MJJx6EyrVOjZrHnuCaJrOjBG75DoAy6gMhaMjnshg6qDVdOPw4ns8O:hLhFMJ2pkjZu4ODop2ljb0ns8MsTS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837025, "uuid": "dae081cd-45cd-43a1-b724-961d062d625f", "value": 63292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837025, "uuid": "353ffdf7-6343-4921-b957-bbc73d577a23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4797b266-5fc5-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837026, "uuid": "b073dd03-9e60-4134-b5d0-534d631ac382", "comment": "Malware payload (Mirai)", "value": "9676d5fa7ab4ca684cfc626ef7c0c777", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837026, "uuid": "6b7fe96d-d2b4-4713-aec4-3d19b34457ff", "comment": "Malware payload (Mirai)", "value": "536ec43d779ee2882e9737cfcecb3dcf705a469b58b497cedd7599eca2fbbad1", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837026, "uuid": "defbc70e-30d5-412e-bc82-0b2484690375", "value": "T16363FB46B951CB16C5C956BAFD1E528D33231778E3DF73139E10AF247B8A86B0E2B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837026, "uuid": "0e747ace-14a3-41e1-bd79-05c52b92520f", "value": "1536:VsnY95a02pXgZs9TpRxnwy2ilS4Ago5cQgM7ioI2Rgns8MsTy:P802VysNpwy274AfI2Rgnsj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837026, "uuid": "4a9f83bf-579e-4cb1-bfbc-168e65fc1885", "value": 71040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837026, "uuid": "4cb3ca40-5f42-49af-94fe-680e8d4b0df7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837026, "uuid": "1c581e66-a6d1-4276-a333-13e62dc9ffd0", "value": "t178c08c26529e0acc8bf882039ed222838a357678838158c3cd526b49c682aa07629a", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc01330b-6048-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "90d901b8-e871-472e-af6e-c7295b27a992", "comment": "Malware payload", "value": "b5102de701d60c1348e52658de9fe4d0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "7dadb995-b58a-458d-b595-92b93ecb01a2", "comment": "Malware payload", "value": "4d5313aa68ebfa7e04f496e8eb192d43bf4de3f6787941978ddee53ad1bd440b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "bea71b38-49e9-4b45-b713-696d2a03ed1f", "value": "T196630946A9429F02D4D622BAFF9F414933137FB8E3FE7101DD206F64278A99B0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "10bac0cf-2611-4f19-a985-26c4310c888e", "value": "1536:Vin/Kgr+C2vXga5Er1qwSdwB3ufbKqlsYiFmf8+4R3reZ:rgSC2vxe1qwSdwB3u2bmfLAbeZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837027, "uuid": "e12a2c1a-b014-4ae9-99c2-6d176020d309", "value": 71732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "2ff1849a-2d81-4d65-95fd-83644beac69b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "c4d25845-a75b-40b4-ab80-1e3767afb44f", "value": "t111c08ca78046fa9ce7d0881200c8233aef18f059763a29c656572a1b93b08b032932", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e9e5e74-5fc5-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "fc186252-abe2-4155-8a7d-0b4a6554c61b", "comment": "Malware payload (Mirai)", "value": "6fb2f979a7bf989ac3edaff700428ed4", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "b2eab31d-3b35-4192-96ee-ddc52b8a9d1a", "comment": "Malware payload (Mirai)", "value": "68600c018e055dcdbc89a0e9acff8fca26a40fa4d6921dd82ca88c8da800ac8f", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "dc016753-0595-4dd6-966f-4fd0c5a01dfc", "value": "T1D383D805BF618FE7D86FCC3749B94B0624CC961B22A93B766934D818F34B14F5AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "f9b8ed10-eeb1-4965-b246-2e65aa565a83", "value": "1536:mKA7fvJaDKsRYKCGRyuMK3bFPoLdBjZgyuAGZcqiw+vnEns8MsTsc4:mX7fvgnZRNMKHaGZMnEnslc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837027, "uuid": "5a13707b-845e-4049-9ac7-520270875b47", "value": 85080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "b39a612b-524d-4a70-9172-bf94f399d475", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef81d505-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "25902417-c82c-470e-b636-dffd9b4f48db", "comment": "Malware payload", "value": "281b9f757b16cfd1f699dc554aef315d", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "a6bbf0a1-93a5-4dc3-a9f8-cf73880f347f", "comment": "Malware payload", "value": "cc199c7e1cf5fe1d343fb858e450624750429a9bf553a9cd58f203ded16a2ba5", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "868fd3b1-a519-45fc-97dc-6b772b2bcbaa", "value": "T139630B5ABC818F16C5D452BEBE1E118D332327B8E2DF72179D146F247B8A92B0E379", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "9dac2b2c-7158-4334-a95c-0ee33d22e46a", "value": "1536:7WnMMdyz0BUXgLfcDQMhG9ujKkuNi2HxtnPjQkMViKaJt:Io0B267M8ujKkb2HxWaJt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837027, "uuid": "376f7999-e4ab-4c47-a3df-9053e12af9c0", "value": 68936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "1682aeca-1365-4247-aae2-59c63c672abd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "311cbca7-bd5f-4c2b-b5cf-3e48349bf6f1", "value": "t181c08075564d0d0d97f0c24714d25751de6270b00f4432d79e9527444d47cf235189", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef7899d6-5fc6-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "476c389b-2f3a-4d00-b341-38cb345c2379", "comment": "Malware payload (Mirai)", "value": "d3bdd1aea21c418c437989346f3655d6", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "dc66f727-c46a-4b0d-b827-85cbb0a52b79", "comment": "Malware payload (Mirai)", "value": "6523ab71209d7166fbe31b5b88b810dc50ba7cc63eeed89107f6d22d0f1c8ae5", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "7a43880d-c0c8-47e1-bc48-55c96beab48b", "value": "T1B6634B217AB56D2BC9CCA43A91F74374F2F5A70A28ACC71B3E611E4DBF10640615BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "5b8aecdf-2b90-4606-afef-ca4547652ced", "value": "1536:KZoU3hAYDB/j//GkbrXmBwAH1tXBo9H8MrsDiZ90:KZV3MB/o9H8OZ90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837027, "uuid": "b55968b1-ab27-43ca-8bd5-c84f028c2360", "value": 69048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "725f3d94-e6c7-4c7a-a47b-ca93a030c300", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1b888d-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "3cc22773-62d6-4486-b2bc-0993389281f5", "comment": "Malware payload", "value": "1e5a004596c9dd1b8eccf6525917dd34", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "988d0e4f-8a03-4675-bee7-d4a86d748d68", "comment": "Malware payload", "value": "1940084c908b20929aa1fb8bd7c5aebf7cedc415162b94307122356e16438ce5", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "b11dc111-148d-4101-984b-fae3614977a9", "value": "T15493C64ABF610EFBD86FDD3706A9070535CC954B12A83B3A3574D92CF64A24B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "39b03883-313b-459c-89c1-ea2b613a5254", "value": "1536:52g9giEddYQn+pj0Lvj1KlVIs9Av1bc/GZWpZX13HhZo7/4lOeN/JnAt:52UgPdYO+NfAv5c/GCQuOeNh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837027, "uuid": "361d314c-8c18-4e0e-a614-032b3d4609ad", "value": 97264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837027, "uuid": "70117252-b02b-4bfb-8524-bc436634d43b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01c45ca3-5fb6-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "6c0045d0-50e0-467e-85d6-f37a5524bac3", "comment": "Malware payload (Mirai)", "value": "32432f6bbc11635dcaea61059cdfa891", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "a7f26ab5-d52e-4053-ae39-6ebbfe5ebaba", "comment": "Malware payload (Mirai)", "value": "b7cf3c3c1df98184eec498824cb7ca77225735caba60626053784e64791faea6", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "01a833dd-b4b6-452d-b757-2533675f78ee", "value": "T12B533B82330C4A57C16B1B71193F5BE1A3BB9E9022E0B2877A0EF74DC5B2E365585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "f96dd4ba-0b4c-4655-80ea-045a4893f8f6", "value": "1536:zXFWuAxQsQQeJiXSaXEL3xaTgZux0IuQouMns8MsTy6:zXwudLQUk0zxrux0IuaMns76", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837028, "uuid": "9cebf543-785d-4d3e-8de6-50f60f4094ad", "value": 63164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "b639f49f-7842-4bd5-854e-48c224b511f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d51d0958-56e8-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "f99b881a-4139-4108-b85d-c36b72b8943f", "comment": "Malware payload", "value": "7176f460b5c79b181c1de426201e6751", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "55233e35-55fb-4d9b-b9eb-c5c0ff5acf6b", "comment": "Malware payload", "value": "b199cfa6ff767e4fc9348cd022acae2cd46f9cadc9d48277e6d7e747ccabfe51", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "66785b14-a81e-45ab-abd9-26ef0002fd78", "value": "T1A3B3AECBB34B85D2C85946F80BC74BDE2E272312AF179AE32D1D757A19791CB490E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "96db318d-3466-46b6-bf9a-d324e31bb83e", "value": "1536:0rgN0Y2t51SPQdNtvOAqLOGCo6y7zmGFXnSngSuZg5nKCrsTmA/LWC:0rgeZdqC3o6yzTnSgSuZg5nKIAq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837028, "uuid": "33d63d5d-9984-4535-9cb3-91bd26ff80d0", "value": 116072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "ed6c7e4d-9369-44e8-9b0c-cb6f12b6cb73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e28a54e4-5fbf-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "02a3445d-ad82-4d15-bab5-412f8545e278", "comment": "Malware payload (Mirai)", "value": "d91ef101aa94780f6c162120ae2792cc", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "d6f61c47-2fed-4eea-b896-1ee005263b35", "comment": "Malware payload (Mirai)", "value": "a40c45d443a722ea0b57fc4ecf2d3ff81527b492336f84aa4eae86b8ee5c8009", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "63c28d0f-bf54-4ba0-9418-d43cdd67e545", "value": "T14B53F986B941C957C6C862BBBA1E42CD373613E8D2DE3307DE15BF553B8A82F091B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "7bab72fe-f5b8-4389-93a7-403db46a7ef2", "value": "768:wejPYqQYWOBYahxMiyvRRbGMfCRWo3WLDOjePU7Qoj/ycgnh6vUDHsjntd1dOPwe:vjZZYacxPCW3PxojKDYUDKens8MsTJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837028, "uuid": "babb0475-1122-41a7-9563-d5e9f3068bc8", "value": 63324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "681fd7d0-7d49-4e28-bd70-6c3008dc559f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f078424c-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "b1eacb25-f4a1-4ca4-a887-d427b031b9b3", "comment": "Malware payload", "value": "73279d1a039db8595e7cc2aa288e659e", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "cfbb9457-0e10-43d0-9bdb-4c8ccbe14a04", "comment": "Malware payload", "value": "9afd8711652c2d269fa485e901ac9693b22a34d97466c8f662cb15e06b50bec4", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "017f7de0-c6c9-42a5-9d7e-a07402dc7622", "value": "T19D831956B8819B11D5D112BAFE2E118E3313177CE3DFB3129D20AF24778A96B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "30a8be38-06a8-4c59-b72c-3357f135a864", "value": "1536:dUnPTl4HAH85ynCEqTVaC8xBQFMGi/C1H1+wu7z25wYd/u:3AH8SzqTVaC4C1H1+wuP22gW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837028, "uuid": "97723083-6e31-4690-a266-f5278fe87855", "value": 83288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "7d4a18e8-6ea1-412e-897d-08b45a6d3d38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "13ee7ca4-da24-4ad0-8f79-0b2bb53f5eee", "value": "t1e8d0a735075555dda4d8430b90ceb5cdb8ff31b02710085d639b77ae406539506078", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34653a91-74e1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "4135f8ec-83b6-4140-88cf-f4a6b2dbc9f7", "comment": "Malware payload", "value": "5dc4216de13178e5b4a75dd195e298c3", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "f34f531d-cf0b-4fc6-9792-ed21ef1b760e", "comment": "Malware payload", "value": "19fa43ba05f05d53db5fe28d7e3a9241118ba88a88f0107f51fd996441558c0a", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "e25aae44-d4ca-465f-ad8d-ea8a70b46092", "value": "T16483D609BB614EB7E86FDD3746B90B0524CC960B21B93B753D34D818F69B14F1AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "54306353-205a-4de1-bb99-50bebb6611ac", "value": "1536:f89ZPn+JxaD6qL9eb5FwlgLpXcS8rO9aZLUmrLQT9:f+Fn+JI/et82a6T9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837028, "uuid": "8ba76495-8133-4404-b359-40b3a9a25fc1", "value": 85020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "7f499343-0d95-4ea8-8855-ab0ec18351f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb90a688-5fbf-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "358c2ef2-4e2a-4514-ae9d-3af0566f8482", "comment": "Malware payload (Mirai)", "value": "9cdc9ab96b6d45d89dbe887ccb252113", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "2fbfa191-9682-40ca-89b9-b617c0e9dd59", "comment": "Malware payload (Mirai)", "value": "ba230faea18ce8c489f1bbb786b6ffc8fd52b1d76891d535639b2e23ecb022de", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "46de2731-b000-482a-91b3-32379e835561", "value": "T177437B73CA6A9D99C58C51F570258AB55B23F610D6472FFB5B05E9A28043A8CF30E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "65750cf9-c96f-4c36-b7d3-1a564883b8c0", "value": "768:W20WoUNwZvCdQ3vo+JX7/orzJ6QDYRXonxNpUTCtzns8MsTeL:W20jejupt7wHcunRUTCtzns8MsTeL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837028, "uuid": "af5e7196-65bf-4028-a4b3-23dea7316dcb", "value": 56616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "d485139b-64d3-44db-a96a-f3b6643154a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efc1c351-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "b10593ae-174c-473f-b6ad-17ff0f967bd7", "comment": "Malware payload", "value": "6c489159a43ec0ed4f85621138f49c58", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "86514412-7a32-435f-85ca-df5efba31462", "comment": "Malware payload", "value": "3c98e2f02189d39e9d320d02002fc6a30b18f4251f17a98ed05bd9ee62fa3eff", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "2e881666-c777-451a-acc5-10c3287b8e89", "value": "T1CA83E94AB9419F02D4D622FAFA5F514D33136BB8D3EA3102DD20AF54378A99B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "33abe00b-6de0-4916-a007-c93aa3ac8dbc", "value": "1536:rEnKII5F7g9VXgjsRQB6pVbMYuj3KM4PXyfrfW/XtYetClOCi7QD1+pCOTJTA3:aMF7ChGsOB671uj3KHPXErfW/XtnQD1j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837028, "uuid": "904bd663-8611-4f05-948d-c9e56b78bd15", "value": 84932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "deb0b9de-9629-4851-b96a-f0c469b01411", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "670a5b68-7baa-44fa-ad1f-3968a5d37f13", "value": "t14bc08016d5346dcdd745030c51c553050951757f77433592db255f401115ed76064c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2411c139-5fc5-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "b0b6ded2-b818-45da-9f8f-a3898c7a2225", "comment": "Malware payload (Mirai)", "value": "78ec5f9c31afbe9cb3642372fa225eae", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "a93dbeda-9cbc-4b92-b82a-54664636397d", "comment": "Malware payload (Mirai)", "value": "3a1a1ed3293b2c6582ad9f4d5f451c2f6a1ec911eff14f231ef8de6d7783041b", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "8a4837e9-4fe4-4aa2-8cff-35a82354c0e9", "value": "T15783FA4AF941CF06C5CA25FAFE5F418D33136BB8D3EE7202DD20AF54278999B0E666", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "565cd00a-3be8-417b-9880-4a1c22525315", "value": "1536:R8nsp9taEQXgGTQNR4wxGKKA+HbSUWxdw3ybqlj7iSB3bjr87ns8MsTLjO:jzaECdeOwxGbAMbSUWxdQLB3bE7ns6jO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837028, "uuid": "87140bc2-ee20-42ff-89a9-ec0c3cfd8bc3", "value": 85460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "2bc22376-1c06-464d-b957-f63e1997a31f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837028, "uuid": "1513c219-2d41-455d-8c8b-d09975699ef7", "value": "t108c012aa5694555d42e45206c3d213458941b3be520918510649274848c1ee3a5165", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b8516b4-4367-11ef-866f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "96eaefa2-9f4a-4aeb-a183-4519d75f1605", "comment": "Malware payload (Mirai)", "value": "8432ef087fe324f72f005c59454fb9c2", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "f7d80707-f627-461b-90cc-5564c4b8eef8", "comment": "Malware payload (Mirai)", "value": "17e53f4afdb4bfb4a4676773d7ef13e15fdfa03b5b729365cc5332ab061a53aa", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "84d98184-dab6-4392-88ed-074fc51a6c1e", "value": "T166931A46B9819F12D4D621FAFBAF414933136FBCD3FA7101D920AF64238A9DB0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "0c18fbc1-cf36-4ead-936d-1ec444312ec5", "value": "1536:Z0nGl/0KHUZx5h/1Oa8WMJSwQETVtYNl1GiRl/VD+Y7BAhsw3:l3UZxz/1Oa3MJSwQICJl/VD+eAuw3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837029, "uuid": "7d4fd8eb-1d71-4bea-b44e-d39dc80cff5f", "value": 91104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "26777c57-a538-4395-a8bd-98d5284e4d2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "d79903cd-b67a-4d5c-9336-5ed0afd1eaef", "value": "t1aad0a7794b84aac5e6cbc383d04ba4561d5c72723f2055796618a75cd9916b046208", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5612f335-50b4-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "790b98ab-954b-4a28-ab3f-82cd01d2835b", "comment": "Malware payload", "value": "4bf61417a3f65b5aa77e34e1c4ed248c", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "5b85c54b-5003-40c1-a555-f9589a980843", "comment": "Malware payload", "value": "bbc010a5624ef5c99401057aefe09560cc13f077fca7ccde8ebf16f7b152ba23", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "74b323ea-8dbe-4de6-bdbd-4ee32aabce08", "value": "T113632B81BD919A17C6C012BBFB2E028D372653A8D2EB7303DD259F2177C696B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "1894c4a3-1dca-41a2-8cb0-cb95de09e5fc", "value": "1536:3vsRvv+gfY5lN52eIrpFHr+kW+ibBfkPpZvkh+:3vILfMIeIrpFHrkjfEkc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837029, "uuid": "f9de7965-4498-48f6-80a3-efbf947cb160", "value": 66908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "174155ff-37b1-4045-9ffe-0ae9292763ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "e25f192a-8bf8-4fc2-a0d5-10b34138637e", "value": "t10be0c0204d5d0c9d3bf1dec944f64306604972bb6b022c6cdac7ef6605c33f234054", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dca331cc-6048-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "2dcad270-690a-4723-b9d4-5260bed3103e", "comment": "Malware payload", "value": "d7e591eddb44bd25c7cf858ce2ac13c3", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "1f3bd3d3-f3e5-4272-92c4-a1cf4fbfab4b", "comment": "Malware payload", "value": "9aecc66e1a55eaead8adb896f0ae38ba5b6500c01c07067e90263e8acd075756", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "323b0e89-39a9-4f98-b2a9-da6ff12c69cb", "value": "T1C043F946BC918B12C5D4127AFE2E118E3317277CE3DF73169D216F24678A96B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "ba5bb73d-b508-4029-947e-68e5be9d52e3", "value": "1536:uKne6W1OHEXgT54WVUycUI1ih0oWEN8TR:FWOHGgeWd0oWEN8V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837029, "uuid": "40370ca7-8810-47ca-a52b-fbd1c93e6a35", "value": 55960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "c2572f79-ea2c-426b-90eb-ed67d1030a2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "4efdff89-6522-4ee3-b042-ff73f79fddb8", "value": "t1dcc08c22484a0ace8bb14e8480c3632e32737c0496aa549a4d4316ce0a85c12a821c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d555b180-6048-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "4649b502-9308-40af-8204-9700214add84", "comment": "Malware payload", "value": "4e42e7d14b03b2ae9b46b4beb3898c05", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "bad60c32-5983-47a3-bfc4-f45dc1716321", "comment": "Malware payload", "value": "1203d00d3b89f2c9fac66fb32ba5b771395c4d6b33eb9d3d617369163aaca3a3", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "7995088b-f36e-4cf1-b579-53442eac8f42", "value": "T111231A81FD919E13C6D012BBFA1E51CD376627A8E2EF3303AD261F257B9681B0D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "46d8cc53-ed82-4b65-9223-d1170756b5cb", "value": "768:tW+ZIeTl4U/NlRGCKxyBOSC3CZz85Jr5GqzgCYSfHJrgHWwj5R:E+Z3TnlWgL25t5KSfU5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837029, "uuid": "fc97ec0e-7028-4a5e-8294-600b4dcae5a9", "value": 46520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "bf2d8868-9f33-4dab-b388-cc6438120a46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "fda5f458-52c5-4d4c-bb46-e39ba4597b01", "value": "t1f7e0d85686040fd0a1941f17c6ccab6f70d850afad58349637c7dd4ad718fa1a1009", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b81ef4fc-f681-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "95079751-135c-4b59-8423-56e18993b8b8", "comment": "Malware payload", "value": "099137899ece96f311ac5ab554ea6fec", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "727f7740-0571-48b4-8dde-7bab3e3aae64", "comment": "Malware payload", "value": "f129c42580aa1e264db2dc02fd02bdb7d852bcbd043871c376c0ef478ea70ed4", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "987bf7eb-ba25-4fbe-88c9-6e61f725f53e", "value": "T1A975190AAF601EFBD85FDE3701A90B5738CCA51322593B753578DE14BA4A94B09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "55874f57-d1b2-4e95-92be-4824f6e3509c", "value": "24576:icEvNFr38Wn0aMR0D6ktAzT/WT4U0PRbBev:GNn09RNu0PR4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837029, "uuid": "061cc392-8f29-4b81-982e-b5f7ee2a58a1", "value": 1576152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "93ff0698-5bc2-4770-aded-6b5263f59f56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "551a69e6-50bd-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "4e499d94-decc-4e36-a8f4-2825bd6c07d5", "comment": "Malware payload", "value": "b7fbabf0d1377566331073d1c4825777", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "0af90ea5-3713-48a9-b6ae-aec89771ec0a", "comment": "Malware payload", "value": "cc456fe7550d8ff4bb152591659bda4858ea8b5c6eb111cccf171dd084964fb4", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "0ecb83f1-965d-4bca-8496-bf8c568800d4", "value": "T1D063F84AAD419F02D4D622B9FE9F414933137FB8E3FE7101DD206F50678A99B0E76A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "6b4c22aa-da16-4dc1-be45-4aeb340fae38", "value": "1536:VCn8Z7VV4to4Xgdy6CvjORmlkKlD6Wl47iKdMxkTTk+2:x7Veto62y6CvjORmlkdXGxAk+2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837029, "uuid": "83130a24-2d3b-414b-9edb-7d8a879051b2", "value": 71616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "9e021873-cca3-496f-a733-33782e5c7203", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "42dcdc83-25bf-42cb-b83e-b8c58d9b59ed", "value": "t158d023144c4d1decd651fd2ec45772350a18f25d1c0334644c54421445311c271314", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0339b43-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "74ea89af-5119-4e76-bf5b-32165841ccec", "comment": "Malware payload", "value": "345e02829c458e6ee89d9e0a95212f68", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "3883fb2c-54ba-4c38-82a2-3965e526398f", "comment": "Malware payload", "value": "4d846c550285b99347aff6e909c62978a8b9fdbfb2005b57146916264ea013dc", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "d97b82cc-d8dc-4306-a217-fab33fbea65b", "value": "T13CA31846B9819F11D4C621FAFAAF414933136FBCD3FA7201D920AF6427CA9DB0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "a2d2729a-0bdd-4767-848c-a8622be9c107", "value": "3072:KPVYiOliQaRr3p3oRfPeJiy+uVunrPKP:KPnO8QaRr3p3o9e3+4urPKP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837029, "uuid": "e07d68e5-07f2-47b7-a82d-ce20d7115094", "value": 99820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "ce88f54f-077e-43f6-b4e1-2564621d6913", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837029, "uuid": "95a2705d-f317-4723-998a-3cf6445956b3", "value": "t133d097b88bd843d8b398c38142cc539ebd1c76b22b030826c218c21ccd222f255024", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b833374-4367-11ef-866f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "4e62e462-4bda-44c9-815e-195b76a91368", "comment": "Malware payload (Mirai)", "value": "7b5213121e7948fe6e570ef4cd4d45d7", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "c31271cd-14b7-4dd3-bb2c-d8b204e8c062", "comment": "Malware payload (Mirai)", "value": "36d0949565076606f4dc9f0637cd013b3501c1b6bfbe9eee71fbcba5006540e5", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "dfde1fba-1ba5-46ad-b961-77228214bd32", "value": "T1AB733B56B8819B11C5D512BAFE2E128E3313177CE3DF73129D20AF24778A96B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "820f9ace-8238-44b3-b9b1-d4c3e7dbf995", "value": "1536:gUnngcQY5H2BOA5JrRy5cjD9a4nEOQCMPi/hywA152YBhd:dfcOAoujD9ayhywA1Ywn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837030, "uuid": "5a1e368c-d3ae-4702-9d33-6bf0bc286f25", "value": 75096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "17fdc6e9-967b-4634-99ea-63ca94be980c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "77b348ec-4710-4891-be92-49cbf3128196", "value": "t128d0a7720e486eecaff5d304874fd79b2fdd71c1231525aa4e4b5714065461f076f9", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d466a55e-6048-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "de24daa5-ec15-405d-ba96-e90e2a2dd0b5", "comment": "Malware payload", "value": "57e17242b1262d84791296bf6b547fc1", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "36d8bb70-076e-421d-a629-95e5d85c15c1", "comment": "Malware payload", "value": "82d905bc028b753eb7f2f79091f872107e1fb857aba29653aa1ee5606b3790b2", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "10aa130c-8f4a-400c-82c4-8b85c54dbcc4", "value": "T1AA232A81FC819E53C6D413BBFA1E418D372663A8E2EF33169D262F25379A81F0D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "c40d99fb-131e-485f-bc3f-6b910d861dac", "value": "768:+FLjj47HCrWmLP4PebGyoLJz0yC2UPZfHz5BiNGibhbbbbbbbbbbbbbbbb3UdWwq:+hjjKCLP4gkNwZfT5fw9bbbbbbbbbbbT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837030, "uuid": "cbcd57a4-6f94-45a2-b37e-459c9775cd7c", "value": 46456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "0db8ba96-eda7-4ea2-abf1-a2923776f74e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "c552f8f8-1e79-4bf9-a3b4-a9bdb42f5b5e", "value": "t10ae0d82009481dc972190aa7c6f9273f6c98615aa61134d297d78d66410afe064105", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0df5399-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "70a18107-d667-4df7-b68e-144dcf8c10ba", "comment": "Malware payload", "value": "55936614e38fadbfb19d9030e954bfbb", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "5d1eab0d-065c-443e-b4e9-c5172c3c7545", "comment": "Malware payload", "value": "d471a2eb1067ae638b03f292f4d9d5de0ad86e202801a3b08202511dd158a44f", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "72be2fd0-d60b-4096-86e4-0bb77e58f2f8", "value": "T18E53F995FC529A17C5D012BBFA2F428D372563E8E2DB3207DE256F253BCA81B0D276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "fdd4d379-d725-4b88-aa60-9955a0aa4674", "value": "768:QuAt0aoH+YRZ8ysaPBy14HcZkwPsE3+2PpK1Lcs9OlBkdshUeo/omeI4wdmrwsvi:bADsZ8yToucewPs0YuGsha/v8i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837030, "uuid": "d60a8672-9f3c-4b29-baca-ef6939e386e2", "value": 62940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "6b2cf6e0-088e-447a-92eb-2b827fdb876d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "bf82b2bd-45eb-4439-bd2d-d745ad76efba", "value": "t191e068310d0c2dec32a04305c7e8371e4cce308f160439a2efed8e230405bd078a16", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0d6e243-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "c5df6b9e-78d3-4260-b391-92663ca531b5", "comment": "Malware payload", "value": "88f8880c3a449cd5e5879de8006b743d", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "b8b97709-bcac-45fb-8d0a-42694155a123", "comment": "Malware payload", "value": "07500496a08dae14d47b02dde5d33a095a9bf8011fd271df0a8a2f32f46fa216", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "b819b8e0-1b32-40b5-bf2d-c86b78e507aa", "value": "T104633C95FD809B12C6C11277FB6E428D772653A8D3EB72139E25AF21378782B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "8eeca2e0-c42f-48e3-baea-f6823a7e1da1", "value": "1536:PZPJLcUjMOCB315GVSBBpaPwABtBqSxG7Rkun/l:PZBLcKW84BBpaPwA3zxIPt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837030, "uuid": "75214a01-07de-4f95-9705-d47606169385", "value": 71912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "e6d08a73-4080-4ec7-b1a4-458c5e53b516", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "9cfbcac6-e5df-4cff-a2d2-68c80e2de17a", "value": "t174e0203148464d9fabe596c500df136af80c787f5f5224555ea71f5c41978d5a4039", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a08e6d-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "6c8758d7-bc4b-4b9c-bd31-5b6591d38cc1", "comment": "Malware payload", "value": "482df4e6ee9ed8b30f5f4467f80f78ca", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "e3dd228a-8401-4c91-98b4-3fd38e65810a", "comment": "Malware payload", "value": "5cdc78ffa2b7983bc875fea4ab9dbfe777a2ecb9c787e81ce36749ec4c15494d", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "26d574b2-05ed-4f3e-b085-3875365811cc", "value": "T176530955B8918E53C6C452BFBA1F828D373653E8D2DA3207DD256F243F8A82F0D2B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "ba727940-c61f-4094-bc6d-df3fe7cb68a4", "value": "768:ZEWiNz2S3dOPQkqjzykXXhPLQG72go/f3T+S5KybPe1bH9hchGsHkxlcDdKnr2rj:hitEPQPlXhR7do/fqaodhch4xl7aJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837030, "uuid": "a59a4550-1488-48ed-b64d-f542422cb880", "value": 63580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "8673c876-12e6-49e7-b16f-9cf1d524719b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "60917b52-9a43-4447-8141-dc4c0362e91d", "value": "t18de068a441880ed977e24f4e88da130f09ecb0dc2a005aadbedeee8f40029d0349d1", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0af99bb-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "6712d843-b56a-409e-9f21-459e274d3c87", "comment": "Malware payload", "value": "359421238ba4e126bae006a35e1f4126", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "0272e779-1df1-41a6-ab28-4f60989c07cd", "comment": "Malware payload", "value": "5ccfddc2ffc69afd746221cbe40200eab340bbc612fe0750b2dc3f7a874edbbc", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "ca737080-e54c-48d1-b3ee-09318790dd2b", "value": "T1BF733B41BD809A13C6D112BBFB6E428D772753A8D2EB7203ED259F20378796B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "436327a0-d67c-4eec-bcbf-f55c51723df6", "value": "1536:VrFk3YQB1fPXD15ueAD3FCUyt7G+FVV+vyDPvP/l:VrU/f5VAD3FCUy7dHPt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837030, "uuid": "353a09de-db24-4878-b647-8a3676a0bb45", "value": 75360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "b58e6eb9-2a4e-4829-a45f-b6a424271738", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837030, "uuid": "e2bc5e1d-7bab-4822-951e-db1f5c83285f", "value": "t1aae0c03044474ccd7fd5d9d210af6115b88971761b4114585fcbbbfc81c75e1f1089", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed83a843-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837031, "uuid": "8693eee8-a3f0-490d-9684-5be8d2c32f2a", "comment": "Malware payload", "value": "dfb820cd35a79761fa3e5a761f20a367", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837031, "uuid": "0d3f6497-0df0-4bec-80e4-19808c51a4d7", "comment": "Malware payload", "value": "2c0997244ac33fa80ce94644b3c1c4010e589f46f7e740aac48ccd267a284b61", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837031, "uuid": "2b652685-7851-474f-8ea7-4ed981757c97", "value": "T174636C17B681C0FCC89EC1784B6BB53AD833787D1239B2AA27D4FB227D55E211E2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837031, "uuid": "c11d77c6-dc39-4d74-a1d8-582bbd4e77ab", "value": "1536:20BVO6dCK6z4sCoPJtR+Abn1UE2AVZon867UW/UQM+4Q:Z/O6hkcgJtUE1UEtZq86IW5MXQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837031, "uuid": "6a57fa76-8dc7-47e5-8f38-65dfa9f682b6", "value": 71536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837031, "uuid": "31dd0617-58b4-44f9-86e3-fdcddf497694", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837031, "uuid": "904ccdcc-68f8-4e91-b91a-378563c9df64", "value": "t1f7315ab039b52d90f1e7f465b346e54598351d1104f271f2c5b1a8ebeb513834e7a8", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1c8f6b4-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837031, "uuid": "6c8a5db8-9bb7-4a1d-9cf0-afc61adfbe98", "comment": "Malware payload", "value": "ae31fd82ccf92ce56fc0281098f5d6a1", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837031, "uuid": "d43d1dca-f31d-4cf8-8333-a3cf071b5d44", "comment": "Malware payload", "value": "3b9fd65e8b4afc0fab3e1fa195795057f4006f7b34988a4406f8658f0179caac", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837031, "uuid": "7c527780-4418-4e6c-9304-d364b67a3601", "value": "T11D83D81E1E229FACF77D833547B78A30A79967C126D1CA80E16CF9111E7024D241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837031, "uuid": "dba48c4a-bab2-4d26-a515-ad1424b7c4cd", "value": "1536:ePZ/yPjbpKc1iIhTCdM4PNvWZfeGHeGryGW0z75zAh2TBWh:g/MLZ57ChKBO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837031, "uuid": "b30e959f-7850-4ec8-a930-835803ff5f88", "value": 85020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837031, "uuid": "5c6d060e-c232-4690-8d70-d2fb366d9894", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837031, "uuid": "3b46ccba-c789-415c-b873-725dccd8f26a", "value": "t1cd115e5c893813f497760c9d2becfb75d46070db49225e778e00e99e9b6dd825d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1f72a77-74e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "b56ea664-2987-45bf-a0c8-0369e08ddb1e", "comment": "Malware payload", "value": "5dc1136dd9f434f9b5610741eac07a82", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "13075552-4220-415a-9177-19789a47717f", "comment": "Malware payload", "value": "264af1ed0497feface41fb89d69405e1db53628f19741ad3245c73b5d8bac559", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "4ab84bc7-55f2-4efa-8441-98d7cc9795e4", "value": "T1E293D90E6E219FADF369833047B74E21A75933D627F1D686E26CD6101F6028D542FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "9a2135c6-ab00-4aa6-8efa-02b1c4ce50aa", "value": "1536:pE1cMjDF3GkHgxXBJKhTKhgNh1tDrxm5fbAeC45Ee7z3Zuv:GlFWkHkXBqrxmdbr7zJS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837032, "uuid": "f336affd-79a4-43cb-8510-876abede12ac", "value": 94320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "251c7b6c-fb10-4c84-8ae7-00efc88e2106", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "47e5bf8f-7785-4c28-9b2f-5da8aa247d34", "value": "t1f6218e4c4a3822f49b765d8d5aedff76e59130df06225e378e00e969aa6dd025e00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14ea0e7a-50b5-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "5a71bec9-c9fd-4b4c-81b1-7c4c5c91692a", "comment": "Malware payload", "value": "b15a935246018d21335632060ff6db6c", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "07a4b72f-8ad7-430f-bab4-6f1af7f3cabf", "comment": "Malware payload", "value": "28b5bc34206b2ba9c56e2c1d05d900280df04ea9f71fd422a9ce01e7c78aaa86", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "IND", "colour": "#0cc7b6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "9afef667-c482-44d1-8d62-9aa0200220de", "value": "T1E483C71E6E219FEDF76DC23447B34E25A39927C526E0D681E26CD6002E7038D645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "83658f72-d6b2-45e4-b416-46227691dba4", "value": "1536:c5dkjueVIuJjj6kZONnONgpNFGIv3W9tmgFUBeI9KJZC2:cHJeVIuJH6kuvG93FUfKfb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837032, "uuid": "6cda0c4b-a048-4baf-8442-e5c7b30603eb", "value": 81940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "caa880ab-9c76-4fb1-aec4-b0634d8a3c38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "282882c7-d891-4ead-a39b-7e65e8493c37", "value": "t105114f088d3812f497765d992aadef76e1a130df5a225e37cd00f9adaa6cd419e00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37273b74-5fc6-11ef-ac1d-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726837032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "d7890057-1f0d-4072-bacb-16878ee82661", "comment": "Malware payload (Mirai)", "value": "23fb0242f50e20b531dd58797597481b", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "32344cfa-a0ba-4805-bb6d-3d076515c933", "comment": "Malware payload (Mirai)", "value": "661f98d37571dcadf837d85be87c865d1f162c3972724f687e0b5794c658b5de", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "b9546819-0a08-4bec-9607-1ca142206718", "value": "T19983C61A2E718FAEF76DC33547778B21979967A236D0C681D26CF9004F6024D681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "2d5414ff-7ff9-49bb-8760-2e6714878a2d", "value": "1536:5csu3xEjLpKc1iIhDCIt1sBR9KwLXboCCfCCeYCHFugkIVMqHQAzns8MsTY8:m36sLXbYg6qHfznsl8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837032, "uuid": "8b247abf-45a3-4302-88c9-d482018d1316", "value": 85080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "de601db5-5c75-4f63-b5c7-9dea578c5b54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837032, "uuid": "aa4d1c85-009c-41b7-9c9b-6474da946f00", "value": "t1b211331c893853f4a7711dad6bedfa32e06170db0a226e378e04f96d9a6d9829d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d569710-7750-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837144, "uuid": "f50cbab8-630e-4eb1-8995-7260e8c3ffa3", "comment": "Malware payload", "value": "6156d33ab8184d2ae9f9012cda90629f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837144, "uuid": "d1c7ce77-94f8-4eca-92f3-dedf96418ef4", "comment": "Malware payload", "value": "ccecac83d4ca97a454f68d1efa365c5ec188f05c44ebb6772deb2f5093053695", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837144, "uuid": "04d86f44-069d-4c5f-9434-a04b0706ad6f", "value": "T11E946B02E2A13D47EE614A7E8E2ED7FC7E0DB9709E1977252218EA1F54B11B2F1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837144, "uuid": "2301c55b-d34b-4ca9-bc6f-d26e6eef96f6", "value": "2cc755d87144bed74f5e59e22cbeffe0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837144, "uuid": "8085aeb6-3bf2-487d-bca8-8793d9068668", "value": "6144:sjcBW4pFRKukQWAniAgssuXdTAvpizCgykfAqjvFsIwDiB:kkRKu54zWdT928f9wDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837144, "uuid": "b581ab9c-10a4-4993-b220-5f96f7451876", "value": 414720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837144, "uuid": "c5abc421-b5f8-4f7d-a52d-7432346cc8a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2e06bca-7751-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726837798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837798, "uuid": "8fc1b94f-aeb9-4fce-befc-af68040ea4d0", "comment": "Malware payload", "value": "52ea87332f471eb967f9c260fb4b4ad3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837798, "uuid": "9722893a-409b-4b29-94e3-68b5ac82ccf4", "comment": "Malware payload", "value": "795ee8d9eed0e327058f12ab75a5e3529d3cb588db743056501a238ff4cd2029", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837798, "uuid": "c1c976d8-ef52-4fde-b6d4-d67342650be5", "value": "T1E3947C02C2A13D57EAA24B3E8E2ED7FC761DF9709E1877252229EA1F14B11B3D1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837798, "uuid": "8c126e9c-3e2b-4539-ac29-3761a4dc9e80", "value": "2cc755d87144bed74f5e59e22cbeffe0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837798, "uuid": "b41200f8-ae56-4f2a-9c85-22f432423fbd", "value": "6144:PByoLkCQrUxMqE6T9iG6tVgr3Idz5DfhA99LP3o3Bz8iCkEs9IewDiB:gvCQwDT9Rr4VW9h3oRzvCswDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726837798, "uuid": "e90a0d80-0266-4577-a2eb-a8d764e0532a", "value": 414208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837798, "uuid": "da237c8d-378c-4309-9c7a-7429f50d86b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a44f62ef-7752-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726838229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838229, "uuid": "22f74bf0-faa0-46f8-91f1-2781b7279666", "comment": "Malware payload", "value": "ae9388288d6677d91fd4145c0b261fac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838229, "uuid": "faba18bf-ddaf-43b0-b582-8b861800286f", "comment": "Malware payload", "value": "72ac7d207c87d3015a9951f062f90da8fdc01afd9fece3b1edbb627bb09569b2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726838229, "uuid": "2df81743-94f6-4f62-8fae-25915bc65c00", "value": "T1C3947C02C2A13D47EA6E4A7E9E2ED6FC760DF9709E1877252279EA1F04B11B3D1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726838229, "uuid": "c147c5bf-d45a-4b52-9276-66916b02a895", "value": "2cc755d87144bed74f5e59e22cbeffe0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726838229, "uuid": "24eb08ae-4e37-4f6e-819e-341cf07c7122", "value": "6144:/BJ4fDU7QSOJGEOSxck8KwrOBZ+MFnaWcQAhSsSNwDiB:PUU7dGFhtwculewDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726838229, "uuid": "8f8fa7ec-eafc-44f8-a71b-ad9245a329b4", "value": 415232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726838229, "uuid": "80fbcd36-8301-4d19-b99d-572219861282", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddf4abf4-7754-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726839185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "f477d857-cf82-4724-aaf4-bbbc76dec3cf", "comment": "Malware payload", "value": "4039ba3500ac058385d8b8ce9dbc64f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "84d2b1de-cb9e-42ad-bc88-fd8defb5f3ad", "comment": "Malware payload", "value": "2f809a665a8e7c8de7cad467eaab2a15318e73d11e8f146afe9590adaf35d538", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "03df3504-82e2-480e-b098-b520aa6f2085", "value": "T17DA31946BB510FF7EC5FCC374AB92745288C950A22E87B367934D929F34B25B09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "f32d0970-8b68-4a9b-967b-77799ceeebf3", "value": "1536:kUYx4dcpBUK7UuJqTFxZSp1cplivSWh+aZ9c4XXo4s5:nCycpBUK5qTgvSW+aFm5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726839185, "uuid": "988421d7-db09-4816-9c67-a45e731af27c", "value": 102184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "5092a3b7-f385-4560-9642-e9daaf7d317c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddf562a8-7754-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726839185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "e4394972-06fa-43bb-a4d9-a40f009440a3", "comment": "Malware payload", "value": "5ca991ef1243dd340f6f9d8d74cfb4f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "b54aa693-cf4c-41f0-9ba3-2107245d743e", "comment": "Malware payload", "value": "1737db4602fba3f89d381ba7f4b134d0e70344e1a7a272f2a201c105ba7b8886", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "34451611-6cb9-4ec2-b9ba-f18efffdd004", "value": "T14FA3178AF8818B11D4C562BAFA2E108D3313576CE3EE7312DD105F2667CA92F0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "6d9dbc1d-d52c-4548-a7d5-6a7daabe8fa7", "value": "3072:DT2F3m30fioQOdbpbvaMfE7WqYQ1d+ft1x0S:32F3m30fcOdb5vaMfE7W/Mdwy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726839185, "uuid": "3849be9c-dbc1-4841-a6f6-c726ddd0860b", "value": 105100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "e0a98b70-7ee8-48a3-b10c-363e2a0cf288", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "faf1db35-20de-4fc9-b8a6-cfdef1f0d42e", "value": "t12ac012b6f66056d857c9174d81ce86581554793157440a6520846b15d2f6a84b6271", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de067fdb-7754-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726839185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "26539589-e651-4245-b959-c5b18a6d652b", "comment": "Malware payload", "value": "d1dc1762a3faae7f208ee1a237c8bd99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "408cacfa-419b-4253-8833-50a1a28d4f41", "comment": "Malware payload", "value": "07f38cbe702ccb91ea5badc8501b541277d6811c8d684bae88fb9b574ac15701", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "d143a08d-6eb2-49e6-a45e-8abf554d11d8", "value": "T1F1C37DC7F2472591C861C6F507E76BAD2EA361229E5FCBE26C0D963F1A350EB09067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "f516d707-e305-4509-a0cb-f386b765168e", "value": "1536:9gAMjbtOuFsBtUHcSE+PX/e5yjOIMXC1hr1cF4C2Wm2n3gGO/LWdD:2AMjbtmBtPkXqyfqEhr1VC2by3gdqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726839185, "uuid": "03e7bf49-18ff-4f39-b394-6d5cade846e0", "value": 125352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839185, "uuid": "020242a0-99ee-48e3-86da-0e3e812914dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31e56f6a-7755-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726839326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839326, "uuid": "e43f2e8b-1c30-4870-b118-b86bcf5ee4b5", "comment": "Malware payload", "value": "bc14c386f8cc54ac2d5d9ac29657bfa1", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839326, "uuid": "e7b2bc74-fc05-42c8-a4dc-d7891dc3e766", "comment": "Malware payload", "value": "1245ff30b60bc72943fefe45e33643949bfa18e04f2844f17d6253f2263ac065", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839326, "uuid": "52366209-8655-4d37-a4b9-8c774ad4b5d8", "value": "T18166183A9B4345C9C13FB57ADD827F3FF4286AEC4319492BAC0508BDA755791A8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839326, "uuid": "996bfd71-7339-4072-b5de-fc99471945dc", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839326, "uuid": "4a47597b-b1cc-490f-9617-e2352339af20", "value": "49152:mMR0DvluHFypsXsvyg/g2xmt+9Jee3LaZpm5KyeiM2RXyU3K+ECCT9ONL03c1JV+:mYXXwT9Jee3LaZU3KXa0eKEK0c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726839326, "uuid": "ab254d78-5caa-4448-b63f-4925edd56bf8", "value": 6663286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839326, "uuid": "26355224-8e9f-4dde-af52-6cd05a034e27", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6956750-7755-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726839656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839656, "uuid": "333d78bd-3e76-491d-953f-62aefdfebd4f", "comment": "Malware payload", "value": "7ae76074fef770a8e46c74a5c681042c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839656, "uuid": "f65c03ec-84bb-4534-a76d-ef982d6fc5ac", "comment": "Malware payload", "value": "72857c67be82dc4681c8566b2b70ebac93c61590abe821d5212ef4899a4f68ef", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839656, "uuid": "c1ec9080-e254-4772-9ff1-a2ccba97bf30", "value": "T164A3C81E6E219FBDF769833007B34A21A79833D637E1D685E19CD6001E6078E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839656, "uuid": "19ce16ed-4f44-4a03-8ad4-e26a7584b9ab", "value": "1536:F7EnxX/ZpiIvAuZrOVgpUEW5iIO24eFyZNI4oSihQc:KnxX//iwCEWAIO2ok4CN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726839656, "uuid": "2dd1c55e-054c-44d0-926d-7b152af81c00", "value": 98356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839656, "uuid": "b1b37ba9-691e-4a36-86da-c7c1f241cf27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839656, "uuid": "76bc472b-2bf5-4dc9-83f2-45c78b1e88dc", "value": "t165214c5c893823e0d7b51c9e5bedef72e66170ef06225e378d10e9ada62dd829901c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2926f390-7756-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726839741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839741, "uuid": "2af66627-a8ce-4729-aa3f-3614c6a533a9", "comment": "Malware payload", "value": "4617d5c054c0ffea7343fb413d0d232e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839741, "uuid": "65f5b376-dbc5-4ef3-ac8e-589bc97e1037", "comment": "Malware payload", "value": "842c95f44718bf6f504bcb655840a19f7f5112130f7ea637d4d66a45fb4d87ce", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839741, "uuid": "246b8a3c-f051-4df6-ba62-fa7b5eb6c7b5", "value": "T1F3A3D706FF550FFBDCAFCD374AE9070525CCA90A12A93B367574D828B54A24B0AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839741, "uuid": "34b935a4-a436-4521-8d7c-9614c389fb96", "value": "1536:0CTVNyBTWIuKXty/jLy43jSZdYq21RFGFgOUAqwKZqlzMHLZTJ3627VukOSiV:00VNyBjOP1XGFNYwKHjNukQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726839741, "uuid": "28c526c7-f926-4991-a80d-7023eed6a574", "value": 101476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839741, "uuid": "5d5943a0-7775-4ed8-86f2-1981449d3a96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48e3dd2d-7756-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726839794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839794, "uuid": "0b8f3da7-1eb2-4ab5-8539-e4291ba21686", "comment": "Malware payload", "value": "7a862a092fa4d0c2b926ce18a54fa700", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839794, "uuid": "8c8ca573-f949-48c1-9678-83df71823187", "comment": "Malware payload", "value": "0fce88ed8e32f305f567389895f7a724a3555ba19941da53046b5ab3307558e9", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839794, "uuid": "65427914-dbe2-475d-a4e2-a19d86ae394e", "value": "T1A5639DA7C9396E98D1A892F0B4349F745F23A11082A71FFB0E55C1799087EACF6463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839794, "uuid": "cb987d89-97f0-4662-8c8a-13f40fefe7f2", "value": "1536:VatwtVAbFF/lAKyLsGp2KR58flmEuiCXMLeWPASi7:Vqhbn/lt8sGnRGmEuipikI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726839794, "uuid": "28262e07-b682-493e-8701-76410279c0d0", "value": 67072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839794, "uuid": "cc123bc1-3b2d-4861-a8a9-66bb614c6cd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99ad0ddf-7756-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726839930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839930, "uuid": "68b533fa-43b8-42fb-9b02-f7fe56aa228d", "comment": "Malware payload", "value": "b5e1cf70ba07d3f09899a5c91f7fe63f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839930, "uuid": "53ffa427-5b80-47ba-a67a-77079af6da14", "comment": "Malware payload", "value": "9bc4815f0ad68fbe723597d61e3bbc65eda89ed824eedf11adb5190baccc20d6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839930, "uuid": "4a09569c-664d-442b-bb17-40c5d73a4986", "value": "T1C7833BD7F800DD7DFC0ED77B4453490AB671A3A256831B3A2367B963AD321B44926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839930, "uuid": "34eaa90b-9b7b-4e20-ae08-25622fbda770", "value": "1536:b1zJjppUpM8f8xiQ8Mypxkc9nCZ9Sg4TT7bpHvxylkUb2Tf:ZzJNym8f8xiyypxk1ZAgGtxylvef", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726839930, "uuid": "9a2fd6b3-7056-4f37-b2e0-c317008b12b4", "value": 85244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839930, "uuid": "fe62dec2-bfd4-4ca2-8194-3d3d0f1a0ccb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d99e1830-7756-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726840037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840037, "uuid": "3e3c3c9b-94e6-4fdf-b343-d07931e2bdab", "comment": "Malware payload", "value": "ff9791807c8964b4ba5ac035b9f567a4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840037, "uuid": "e6d48e54-c5b2-4b6d-8198-c97671fbaf4a", "comment": "Malware payload", "value": "4f0e810354d8d73f871442df7f9d223e59a2537fbc922e76daf85fc17654a86f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840037, "uuid": "aa742e7e-3cdd-418c-9906-491391130e87", "value": "T12603FA9278C35A97C2E023BAB7BE518D336563A4C2DE3217CD106B14B7D691F4E63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840037, "uuid": "24b901b0-da94-4bd7-b7ea-2b7fbf6141a5", "value": "768:wYqAqvplQ8dqk03enDrXg32kQdoeDsv6eM83uuXtCC7MZICt3VxSi:wYH2l3dZ0uXkQiHU8iCoFxSi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726840037, "uuid": "11f55094-e637-4af5-a713-89f4036e67f0", "value": 40716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840037, "uuid": "8b6e839a-2bce-4d69-9135-d1d765a821ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840037, "uuid": "39470851-0cd0-4449-a80c-89ecc4765c14", "value": "t108e02200fc688e1899e6aa70ccac46b4a501126361568b21cf15dae0cc3f554b70cd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fff6c3bd-7756-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726840101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840101, "uuid": "8fee59d8-b61f-4cac-b1ef-67814cedc561", "comment": "Malware payload", "value": "8302a5608711c3b23d2c95cfb3ee5a74", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840101, "uuid": "44c36444-1361-439d-917b-9579fb1883e8", "comment": "Malware payload", "value": "1b8885daea86d29a54803d4c23762756c28c5d904b5a350036acb647c1f7368f", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840101, "uuid": "b91ba654-8afd-41b4-9166-ca61fc459af9", "value": "T13966173A9B4345C9C13FA17ADC86BF3FF4186AEC4369491BAC0508BCA755791E8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840101, "uuid": "330a76c9-db37-45c1-9989-027303a5e68f", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840101, "uuid": "33c396c4-07f9-4ff9-8fb7-cf4a92a0d221", "value": "98304:LWkA9QfPNB3jNNz/jTvyfzMyLPA4z32jvNNHipzjMs5UAcz7:f9B3jxyLPAcwlNC4Tz7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726840101, "uuid": "d98899aa-2997-4055-98ce-b513c80d8c90", "value": 6651060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840101, "uuid": "9be00452-8023-400b-8954-ee1918b6a785", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "745b45d6-7757-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726840296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840296, "uuid": "5bfcd664-6a4a-401f-925e-93f97a9bb8c3", "comment": "Malware payload", "value": "e68af7174d5a66a9cb36d92aacf3a3d9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840296, "uuid": "c0e6ac6d-ad77-42fe-9f52-bf4a64e7dd17", "comment": "Malware payload", "value": "22a8d4d81c4072c1bac955d1e0db95d00d470309f4b82fdeb65a3dabae8bf2cc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840296, "uuid": "bf7a97c7-fabf-478d-8866-70ebd1e6ef88", "value": "T1E5E33A46EA818A13C4D2177AF6DF424533239B64D3DB73069928AFB43F8679E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840296, "uuid": "94b6d6a3-faff-4cac-84e7-82d6949a5a28", "value": "3072:vkM0FSN0t9T6aqWSeMlzkCJRrJWqkFCm/mCGM/9BUb7h9z+:vkM0INKt6aqWSeMl4CJWBEm/mrM/9Kto", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726840296, "uuid": "a474ea73-9afb-4d7d-b2ae-2d6113a4cfc9", "value": 157298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840296, "uuid": "0317076b-5fe6-40ff-8029-e1f8a4415eae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840296, "uuid": "16f92bfa-5706-400f-9ee0-f921b3268545", "value": "t10131dd32972141196a51cd50dcfd87f1262987572345af73df3ac58c682e05af62bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be1668bc-7757-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726840420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840420, "uuid": "f2ec3f5e-aded-47c9-983a-eb82cce0a4e3", "comment": "Malware payload", "value": "66c272b9d0697c6ea5f9a9e758f0b3e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840420, "uuid": "dc41a762-cb11-4063-a2c0-655f2d5593ae", "comment": "Malware payload", "value": "909875be8a997cd7a0166203bf892a173d5b176ef10bc99d581610e9874fca4b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840420, "uuid": "783f3908-e1b3-45f8-9773-0f682bfbcc0f", "value": "T163634A13B58190FCC29DC374476BB63AE93375BE1239F2AA37D8FA126D49E211E1E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840420, "uuid": "40e8d18c-97f7-468a-a89d-00fb96a80270", "value": "1536:GBEtqb9a7oY6uHhK0ygRZKLVqozGNXP57atD9kuQTGJ0OGjeYU:htYQsYFwERYJqozGhPctD6TGOO+G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726840420, "uuid": "3906738c-cd4a-4d56-ac7c-2b4f35fb807b", "value": 71824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840420, "uuid": "bf01e887-ca92-43f2-9d58-e12862b9357f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840420, "uuid": "4fa68397-8b27-4005-a21a-faffe4eba10a", "value": "t14d2166a639751d60f0fbf532b316e14418380a9410e176f29d72a4fbeb527830db88", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "443c883a-769f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726840516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840516, "uuid": "8bc1311f-36eb-495c-999a-e786a6bad4e7", "comment": "Malware payload", "value": "c9f4c027d69942e18bad05608925360c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840516, "uuid": "7eba0b88-1e0b-438d-a87f-5334dcba7961", "comment": "Malware payload", "value": "18f409cf48fde463d8de14431e4be423c71dccddd49a2c5a9d0cb77b32efe3e3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840516, "uuid": "d5b8649f-c2e4-421f-84e3-81c001f4471a", "value": "T138A176CD3BA126335E50DD52FA1381AF25A2E0C025D14FE6B4C8B0B678ABDC0F6C1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840516, "uuid": "25ec291d-8752-447f-9cb1-9e6627c6386f", "value": "48:1tLABL0QLCBdLQGLUgqLXTLgH65QwIcNYO+Bh80wggLXswMjcBJ8gDj62VXom0JP:1x+ZCbJzcHgRwIGV+jlngDswhvHjUtx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726840516, "uuid": "4e34ee57-31cb-408e-a45e-34125c2892cc", "value": 4709, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840516, "uuid": "889699ae-f1be-4df4-afa1-e982ade3a269", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "141ab6a0-7758-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726840564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840564, "uuid": "3e5e8962-37c9-4717-89e5-8de59fcff298", "comment": "Malware payload", "value": "b551098b4beade53e6b488ef8f802366", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840564, "uuid": "396af9f6-c54d-4296-86dc-d0ecce90efe8", "comment": "Malware payload", "value": "854c4560dabc8987e4d06c784fbda806437b0e72ed43791ee33962bf7459b41c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840564, "uuid": "8c667391-ee5b-4d58-b36e-ca38a0fb9db1", "value": "T135831996B8C18B11C6D512BAFA1E118E3313177CE3DE72229D206F2477CB96B0E779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840564, "uuid": "a4cf0fe3-3fb9-4856-bc57-4b8ed7bcd3a5", "value": "1536:A0nmnWY5FiTMCG8seS91YUHIUGa3ybsbuQnMliHDE3+Ws7wp5uSiWM:10Fo6PhIUGa3rDE3+WsMp9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726840564, "uuid": "df252454-e43a-4c45-a752-e42e1a02a20e", "value": 83448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840564, "uuid": "e4a8d99d-3b95-483b-8a2f-a214c10ba8a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840564, "uuid": "d30a4343-f2f8-4ed7-87c5-98e26d2a998e", "value": "t1b6e02b426a406fa07af6570154fd306bd8abb07c9e175432b57d2fcb935ac9130218", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4545dd34-7758-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726840647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840647, "uuid": "db45306f-66cb-4884-9930-19bb36e5826a", "comment": "Malware payload", "value": "1072766274ca7bc3b0eb0e4f34c41884", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840647, "uuid": "05e79b63-8b5c-4908-9492-940231bdc0cb", "comment": "Malware payload", "value": "916a0e3baa293517651c90039756cb1b9956f16d07bebf9efcd60845857cd153", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840647, "uuid": "dbbc767c-701b-4cdd-ab93-08e9e394cb4d", "value": "T1FD733B42730C0E47D0675DB02A3F27E093FFA99121F4F685691EAB4A9271E361186F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840647, "uuid": "90db8ee0-48cb-48d1-93bc-2f99ab465b23", "value": "1536:FjhOPFdZZ9qJfjEh2U34gD4faD8BqJIQoDUMDes2kOSi+e:m3hEgUyQBqJItDOee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726840647, "uuid": "8904dd96-1d28-4975-8036-b77ea5e94fb9", "value": 75608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840647, "uuid": "e7638c09-739e-4a15-8b4e-322e6903e114", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aea33faf-6855-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726841046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841046, "uuid": "124ac018-f67b-4a0e-9ff1-73b4b0d03c45", "comment": "Malware payload", "value": "136847bf11cace40b20a91b8fdeb59cd", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841046, "uuid": "9f645e27-e7db-4bf8-84fe-cc60842ed039", "comment": "Malware payload", "value": "eb3032f0ece8e5b1e77842283868b6ce8e003c92ca84f4123e71094b4b9aa18d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841046, "uuid": "82c59f5e-39cd-43d3-9178-e3174050cfe0", "value": "T1D475337FD7F2F138E48368F487BB82F96264F446A3250EB26D4C753AAF0399225465", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841046, "uuid": "7beed376-d73f-46a1-a8cd-490b50716543", "value": "49152:tSvTeC2soqOhMPXAqHhkCcbdegNwykmuTPOw1EDp:kDSh2XAqKCc0geyWf1EN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726841046, "uuid": "943ed429-c101-4635-bdb5-c58f824037ea", "value": 1681656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841046, "uuid": "101039c1-73c7-4a66-89a1-8a0da4bdb890", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841046, "uuid": "d1782c30-76fb-4137-be01-5adbca384320", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af7db7ad-6855-11ef-ad0f-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1726841106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841106, "uuid": "6c72d0c6-118f-4f04-9254-a32a51a38612", "comment": "Malware payload (CoinMiner)", "value": "f6d190c69bff0fee4414a20101267b20", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841106, "uuid": "ca4b0f8a-ef7f-40fe-84cf-a3a9dd10cb25", "comment": "Malware payload (CoinMiner)", "value": "e86081329173be1acc1486a47cee17c9c7b78c50928e7bb9e05a86f1c040a746", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841106, "uuid": "870b4832-1abe-4675-8905-e3f753937aa2", "value": "T18C35331369001E105DCED97688A1CB708D69A9B523AF340F88F237F1696AE8E4DF57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841106, "uuid": "595579fa-9bed-493e-9585-f8d3f99a4cc7", "value": "24576:esizaUcBZ1E8noALGP5XrRX5SIAPfotseGi7e7lovJOEk/ZFzl:eVzaUd8nodBXrRXXAPgtlGHGvJGl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726841106, "uuid": "32e4f0c1-8bf5-41ce-ae1c-4ae39471775c", "value": 1143444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841106, "uuid": "ac677126-e643-4d1d-b3b0-affe99e65e63", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841106, "uuid": "698b9b4d-11de-41cf-bd01-d8c3ba3f8034", "value": "t1499002504044cd8811c5b8c2a150c0c0cd33596d46e93ee481a42694d40648551809", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b06e1caf-6855-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726841107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841107, "uuid": "0a943d79-0ae4-4b8e-8821-175ac8fdde41", "comment": "Malware payload", "value": "ca47be8c5ea7098ef27b29b1e7156950", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841107, "uuid": "b39bba6d-e096-48a1-b1d6-a0484f994213", "comment": "Malware payload", "value": "42efa318e298e6069af565b5d09f30d38fc15d7ab1f1361addc9288e5a4e4d98", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841107, "uuid": "869bab95-3bec-43d9-b09b-14ddd2dde662", "value": "T1A565332730F023A2A1CD1ABA7CC4EF5D604506B5532FDAAB512101BC5FB2F253AB7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841107, "uuid": "78198977-e723-4318-9a42-3acb97eaaef7", "value": "24576:yt6FFUng7yMX5thgYLqwWlFFzyEP9UXz1mN07ooOqZGTsFdlDLlFHHcm5zfuHnW:ytAFGgdX5thvLqw2uEOXz177ooVSYDLP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726841107, "uuid": "f67de27d-d099-4126-a3d7-47e7fe35772f", "value": 1539972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841107, "uuid": "96782eca-9fec-412a-be1b-d1963dfebebc", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841107, "uuid": "b5ed2d12-1173-4b9e-934d-25413396bac8", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a34987d-7759-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726841165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841165, "uuid": "8cb7c4b5-f8ed-447c-b812-0902ace8e834", "comment": "Malware payload", "value": "12860c8f39570ea1a7256b7ed9dabccf", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841165, "uuid": "ca6c4cc0-9ed8-4e27-90d6-c401d91010a0", "comment": "Malware payload", "value": "0213e39792ac0c5b66491f90c4b0fc4afdd84f40944922cab8a3bcdb1cf88cfc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841165, "uuid": "fec2c89b-94d2-474e-b08e-385f07a61bcb", "value": "T153352302CF18ADB2F0F04FB219111664C87BFF653624C56B3344BE9E79F29A24CA5B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841165, "uuid": "5b2fc54f-a7e7-4926-9573-b644295d239b", "value": "be41bf7b8cc010b614bd36bbca606973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841165, "uuid": "346a8789-5d40-43eb-8b5b-5f23de06ec52", "value": "24576:i9X3iqR+jmjhtHquFUn8dCHELjS6PhZsNrelZ5dwSzhR:itsmfVin8QWS6vUeD5dwCR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726841165, "uuid": "c6548245-7d67-488a-924b-cb8e0007e3cf", "value": 1136633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841165, "uuid": "bff87147-fb59-40c6-9fe4-1d0bfee15d53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a4c8edf-7759-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726841165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841165, "uuid": "c64e9c22-f2d6-46e1-8f3a-35f46315ee06", "comment": "Malware payload", "value": "72f7c1208efd829ad580e839494a681c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841165, "uuid": "962260c6-081d-4971-adb8-1548c6e47a6e", "comment": "Malware payload", "value": "e63036cb18083af12146e4a679bb5ae0cefea310a083c6dc78a8c88365896fe5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841165, "uuid": "727d5b85-b0d8-4d82-bf2f-34bea43f6922", "value": "T1C164230CC565A852FC7ACD30E081A2A98B396B8794E000D75A5BA857D706FDCB37B5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841165, "uuid": "9b97f480-193b-45d7-98b3-41146aee65ea", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841165, "uuid": "fd5d987a-c3c3-4310-9280-5211700648c6", "value": "6144:JRJ+dXQfkINIrPVJQ1gjbNL1qa41Brn1ouauy+gPE06qlGkNh8EYs:IImrnvbNi/quy+cEY8QV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726841165, "uuid": "7fc7cc32-8c55-4e24-8259-c8b3f349e18e", "value": 331640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841165, "uuid": "058be177-0ab9-4ecd-984e-b6b9cd9c6ddd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1401132-7759-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726841284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841284, "uuid": "070b0f5f-9b30-4af9-b7bd-7be72fcf64ac", "comment": "Malware payload", "value": "f9a2c48cfbb8a5605b2edaee528833d8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sora", "colour": "#5650be", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841284, "uuid": "b7c0848c-8b2a-4d90-8ae8-86a62aecd3c0", "comment": "Malware payload", "value": "0e949b59f947c5278d9797fa3d078c5aa1d4b969f4e6478c419ec4c3e62895d8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sora", "colour": "#5650be", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841284, "uuid": "9a365b46-e550-4cb8-b550-4bcea4113d41", "value": "T16A733B91B8815A13C6D452BBFB6F428D73261368E3EE7203DD25AF21378781B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841284, "uuid": "7ed0487f-81ee-4309-81c9-af9eb200eba7", "value": "1536:7wfr0cBK047tHS6vn/iIp3dZ+wlOCRiT2kX+SPSettRWSi7:7wfz2F6Ixe/t4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726841284, "uuid": "c91a60e9-a9a9-49c6-a6f0-0af9f28d2c3a", "value": 77636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841284, "uuid": "371f3eac-8617-4afb-bfe6-5a5dcbd2754f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841284, "uuid": "7e2dee73-8a9a-4b99-a04b-0d910ac42b0c", "value": "t1e6310276ced00edcb7d0c79892cea26a94b530786b022562cb6d275e4226cd1711e4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e65faa4-775a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Cobalt Strike)", "timestamp": 1726841575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841575, "uuid": "375588df-f5cb-4bc0-8fbe-28e39b5d21ad", "comment": "Malware payload (Cobalt Strike)", "value": "aec68374e2ecd930e0243d021f4ec0df", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841575, "uuid": "d51b4f47-acef-4653-afb8-578f39578574", "comment": "Malware payload (Cobalt Strike)", "value": "0d342522ce682b1c2bd832519b3fc0dc04c0f50862327f33ed8f38d7cb6a7b62", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841575, "uuid": "9a660e38-b710-4c02-a07c-a84778a94233", "value": "T1CF14121A3BF4E427F7C40F3B1A207AD485C13AE913A02E395F7BC5BB90369AA55C79", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841575, "uuid": "e25f4b9e-19c8-4613-84f0-5c807a1f83f7", "value": "9aebf3da4677af9275c461261e5abde3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841575, "uuid": "205a9089-d8a6-44fe-ab17-eaf4e55e0836", "value": "3072:OAGgiIM8IPUVaZZLIEx950N4EvzMXx4Q836brbOgCbppnZmjjJetAts93YqS1:7aId43l0ex4Q836bObnZmjjJetl93E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726841575, "uuid": "8c6b4352-f567-410d-8a6e-f955f4c857b8", "value": 204288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841575, "uuid": "1e51b8d6-ca39-47c5-92fe-a9cef4f0de39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd9fda7f-775a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726841708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841708, "uuid": "122374b9-06e5-490c-93e2-eda34901f2a8", "comment": "Malware payload", "value": "4fe28c6eff2c2cfdc74b1226925baf4d", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sora", "colour": "#5650be", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841708, "uuid": "ffeb92ed-b5bf-4f74-b590-9b1d01fd7885", "comment": "Malware payload", "value": "af6d5b1569059e86bcbb3155891053170e305d239eb4c0c14b410d6c950507d8", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sora", "colour": "#5650be", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841708, "uuid": "ac5a0dfb-e862-43a2-b5d0-0390becabfd2", "value": "T180833B22B9761E2BC5D4A8B622F74725F1F24B9A24ACC61E3D710D4DBF6064032437", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841708, "uuid": "b9041795-2d37-41c0-bd17-1f2c8570d652", "value": "1536:0mlbsSan8VDvZ1hIuvuenjbzt0RNk5/dKQ1KetJciTa:0qtB6ufmRNUgga", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726841708, "uuid": "29d8034c-243f-44e1-8ad1-080fdbeb7942", "value": 81116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841708, "uuid": "f313b62d-2f9b-43ad-bacb-75a9561b2252", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef74e9e3-775b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842221, "uuid": "31a7a6d2-6124-4c7e-96d0-5122473c0a08", "comment": "Malware payload", "value": "07d4d7b9f640a27057cab3c0fd6635a8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842221, "uuid": "459f2b57-113a-4d8b-87a6-743f4cf8ab90", "comment": "Malware payload", "value": "c6919b70839bc6f50c603dae03b98bac7ba59004fa9d957b301014f7019da296", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842221, "uuid": "a5b6bc24-3639-4b4e-981a-8133635bfed1", "value": "T109947B03C2E13D47EA654B7E9E2ED6FC760DBA709E1877252229EA1F08B11B3D1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842221, "uuid": "a9e439b1-b223-4411-9070-8995cf78b9d7", "value": "b0ca902923802277a38cb72a8ef9b0a3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842221, "uuid": "3bf23380-de5e-4b73-89ae-87d98932ce8f", "value": "6144:4qplghE008p7aBm2K3n6UECjxc6i7qJ2VCAJEpsAgLwDiB:rp0dpH2In6UbjcVEj6wDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842221, "uuid": "c6b5a676-0849-411d-a1fe-3440794a7831", "value": 414208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842221, "uuid": "5e40c4f6-495a-4f26-9cbf-e4eb73219235", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f96a420f-775c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842667, "uuid": "bb2a142a-da5a-424c-8854-c2005d36ed69", "comment": "Malware payload", "value": "52bd79c118349cd8bf30635d9999f447", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842667, "uuid": "fc80ef4b-2f0f-4764-9b41-955098f31e09", "comment": "Malware payload", "value": "0d6187a4864bd3247ae200ba94133935472163c1c5fcb9c299d4182d47ffc69c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842667, "uuid": "97dbd4ce-f6fc-48e7-a812-2d51eaff995c", "value": "T1340144340F5FF14409C66241417EC9485E2D8A6F91221D16BBC58710A38E0FD13BF3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842667, "uuid": "0ba25165-55b4-4a82-8006-df80b71aedac", "value": "12:adL5UY0vzbpPt9BKC2toNKC2YGO9utw5Ul8uDuTldYlQqtJEOUB7LgyaIS1qj0FQ:adeHz1PtvKC2t0KC2YG9tw5UlB6TldYC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842667, "uuid": "b67f977b-b7e5-4955-a9b5-9d895654d65e", "value": 698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842667, "uuid": "a6cf5171-677a-4c4f-8448-7642171734b6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85ab9252-738a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842786, "uuid": "112ef392-d33f-4f88-84a0-db8f3b0ccf6b", "comment": "Malware payload", "value": "27b9f35dd5e29794e0f254d4006f6fa4", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842786, "uuid": "9769b73b-f03e-4055-810f-fba63af50c88", "comment": "Malware payload", "value": "ca3bd2725a493554e081ea2c5528c7f134edad6374e2747e27230f112cec7f1d", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842786, "uuid": "46fa7063-bad4-43c9-9fe9-8069e8303b16", "value": "T14DC09219984980379A98C88330A0239BDDE1204844FBC47998CCC4001B0EF8A7FDF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842786, "uuid": "e410c9f2-73a2-430a-acf0-dda01f5be2f4", "value": "3:gJiFtCSLUxGTKEsQUliKMFHGwImMRMFHIHBCAlgJRMFHDMQabKy:gsvRLUxGTuiKMFmMUMFoH4MFjan", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842786, "uuid": "d0215f1b-6cd2-451b-8bb3-3f74648e4a8a", "value": 132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842786, "uuid": "f7117712-b77a-4a2d-b9c7-4773081789f3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "633ee025-738a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842787, "uuid": "125bcf8b-2ff4-42fc-9e5b-d940332f35f8", "comment": "Malware payload", "value": "e05e8f072b373beafe27cc11d85f947c", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842787, "uuid": "856a233f-1e0c-4007-afa7-297f1f4002a8", "comment": "Malware payload", "value": "717c09427fa5754ba92f92961545534048d0a76528c2e95c4d5ec6cef47c612f", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842787, "uuid": "c544a5b3-146e-41dd-abef-7248276262ae", "value": "T1E55124432A4141D35D7277B42942498AFE97063E440A4928BCED86462FB4FAF0BEEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842787, "uuid": "b3536b48-32cc-4fa0-bffe-e6d132426ecc", "value": "48:8tK2NEx6tjcwtqtTwnWTwa1I84WL4mnZpGL103pSCB0JVKprePlZ:8sKai8XjkM4TUeZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842787, "uuid": "5e64ed26-de35-43dd-a260-9dead1733797", "value": 2441, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842787, "uuid": "2c6b8d76-38d0-49d3-ad91-27ea13d9038a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff300954-5fef-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842787, "uuid": "f4d73bcc-7d8c-447c-899d-a659f11e9f3d", "comment": "Malware payload", "value": "2d52690f8f97f525409e6e2ffb0b8199", "object_relation": "md5", "Tag": [ { "name": "cmd", "colour": "#965958", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842787, "uuid": "f77910d6-da7c-451c-877e-9769c8cddbc7", "comment": "Malware payload", "value": "acf10d95b975cf6c558ed179e61b2d6e3d207b09fc6a47bdfe0b1b7ade8a834e", "object_relation": "sha256", "Tag": [ { "name": "cmd", "colour": "#965958", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842787, "uuid": "f6c5c76f-e83f-43dc-83ec-6c32fabd87a7", "value": "T1A551F093028650CB3D72EBE526044840CB9F826E53A4C45975CF814A9BB9F9F43EF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842787, "uuid": "72507ae5-7c51-4670-843f-caf179ca75fd", "value": "48:b0K2U7V5rN81fN80XUbaOUb5OzQ/iqzQ/hXDTjODAKpxVgXDOs59XyCW:NrrN81fN80Ebanb5OzQ/iqzQ/hTTj+AI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842787, "uuid": "524a0316-b392-4559-b485-b9e8b33e083d", "value": 2914, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842787, "uuid": "e623d51f-31f2-4795-95ce-e1adabfa7584", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19c80a39-75cd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842789, "uuid": "cd69419d-c06a-4bf2-b7fb-bc392d4065c4", "comment": "Malware payload", "value": "0568c4bcf6acda54e2251b1e35929608", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842789, "uuid": "2d3a9456-2399-4d07-83e3-6d2387f16687", "comment": "Malware payload", "value": "264551a092cc2329dc4ef096cb88112583318dce4cbc565cff77ebe4c86f1800", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842789, "uuid": "3c06b879-79c8-481b-832f-a4404e83ff52", "value": "T1B6159E0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842789, "uuid": "a05d1d83-09f0-4128-9136-525ace701337", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842789, "uuid": "f015e050-b723-4eea-bede-ed6e8c29790d", "value": "12288:4qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga2Td:4qDEvCTbMWu7rQYlBQcBiT6rprG8aOd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842789, "uuid": "59b8af21-8691-4e08-af8c-919f5ec7e47a", "value": 918528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842789, "uuid": "1a207044-664c-4606-95fc-d83aa84b0699", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "475c8027-775d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842798, "uuid": "3c29ccef-c17f-4c6c-9a53-1bea22821216", "comment": "Malware payload", "value": "a5b724154ef3434013666c4f5ab0ac17", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842798, "uuid": "b77a9934-fd90-4a76-83e5-9aa7f2e4fe50", "comment": "Malware payload", "value": "3a31cc22829750508f76063b4daf9031cc77f1a3d18443bc49c2c500ae9295f7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842798, "uuid": "000d3527-4f9f-4981-83d6-81f31dfafc72", "value": "T191D53CA1B80672CBE88E17789567CD4AD93D07B5C73108D3996DB4BA7DB3CC122B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842798, "uuid": "28ac51e5-238a-4d8b-962e-ab0a02680929", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842798, "uuid": "86044963-b5fb-468a-b352-715e3a489a56", "value": "49152:/rAqAqqMDVG6E0KMwUKMxMT5gx5x2snhVe0c:/0qAlMDVFvwU5atgxGyVe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842798, "uuid": "1d47aadd-173d-4c38-8318-743633f82ce5", "value": 2828800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842798, "uuid": "5e978e61-d038-4a3f-ace5-0c518e294f4f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7530a8fd-4dd7-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842964, "uuid": "0864b2ca-82d3-4656-80e8-5cee7c2816ef", "comment": "Malware payload", "value": "397ff5e54194072e6d8a44a0d8cc1b27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842964, "uuid": "26641881-51fa-4c52-bc66-a604af25abb4", "comment": "Malware payload", "value": "d46555af1173d22f07c37ef9c1e0e74fd68db022f2b6fb3ab5388d2c5bc6a98e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842964, "uuid": "b8070cc0-5b22-4e3b-8f6c-14858a095ad2", "value": "T1DD01288E6722D51420DDD524FAF14F7DAE31F2856D226816248B31FCE5ECA9433E8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842964, "uuid": "14ca7c30-049d-4c60-82fe-35bd1f33618e", "value": "24:4ud1jvF3dudpRduJinDSx1wyx1+u5C2uK6QuTzaH+2TQuTzuC7v:4uddudpRduJiny1wO1+uA2uK6QuTu+29", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842964, "uuid": "bb623efd-a480-4100-ac9d-ab48edc4506d", "value": 795, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842964, "uuid": "6e5be03e-5027-429f-9ba1-d79a2e7cfe0d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aefcd386-6855-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726842965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842965, "uuid": "62926ac2-8d9a-4f6c-bd10-6b4d406682e1", "comment": "Malware payload", "value": "f4eb154bac7b5771a8adfd0a00d1b18e", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842965, "uuid": "2d77c026-ded6-4f05-bd26-9c28089035ec", "comment": "Malware payload", "value": "88a339d0932322a43a5101d7afad05fa3bbcdbabe62cd5e287daa077398fef97", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842965, "uuid": "d2c952a5-e747-4a69-b8b4-67fd8e7f22fa", "value": "T1385533369E1758F9EE84356A6C0FAAE6DD633B4B5C434CE2233802260637549C3D62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842965, "uuid": "c2723f13-add6-4c69-a9d4-9dfa6372c3a8", "value": "24576:k1wziCuWVlCi/kFUJyBe84AoNFXCKB6lxGRgd4bnN6qfLS0mC8zsS+S:+WVlCJuJasLyC6CRU4bnNffYzN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726842965, "uuid": "71be601f-49ed-4a20-be5e-fb5f85e11a77", "value": 1389812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842965, "uuid": "74ba884d-38f7-4d7a-bfa3-d0fdbf529f60", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "710fe823-7760-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726844156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844156, "uuid": "31b62a3c-500d-4f80-b23f-6cd7b8124ca6", "comment": "Malware payload", "value": "6b8a72dbb5c7677b80dbc590b54d4092", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844156, "uuid": "7613ca51-fb00-4010-ab52-7fc9393d4fa8", "comment": "Malware payload", "value": "edbc437d02872fdd90d8795882e44437ca2d0de4ec3d52cc533337f5100660af", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844156, "uuid": "90d95761-f402-47fa-af9e-fc3599cdd4bd", "value": "T13595338669778EBEC08B0AB8F68BB63750BC91C34E874AD5F185A4BF35087237415D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844156, "uuid": "b5855e69-b9d1-442f-a3f8-62bcf22c80c1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844156, "uuid": "07112b9f-5382-4db2-934c-292cb5017c9a", "value": "49152:9PIORgF1RbSH5x1bUYL9tvNtPgKzIXJ1zqJx:9QORRx1bUYJtvNA51zq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726844156, "uuid": "497f1a40-0222-4e32-91b7-aa2e136be518", "value": 1926144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844156, "uuid": "16bc0f4a-3170-447b-b209-89ee7219c866", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "622f606c-7762-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726844990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844990, "uuid": "13785c86-03b7-4202-8457-b1402392aec9", "comment": "Malware payload", "value": "ba2c379e8bcccc0ced066fe87a456b5e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844990, "uuid": "36a69815-b83d-4d9e-bd4b-de7d01a8ce7f", "comment": "Malware payload", "value": "ed3f9ecbb3ef4e4f69c31aeaa9977fb90ec45b15ec0fa49b7324e7c10319d5dd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844990, "uuid": "fae7f343-ade8-4f41-a121-1e6d3149420b", "value": "T172948C02C2E13C47EA614B7E8E2EE6FC761DF9709E5977251218EA1F0CB11B2D9237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844990, "uuid": "09055619-12fa-44aa-8883-18414a6657a5", "value": "b0ca902923802277a38cb72a8ef9b0a3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844990, "uuid": "203fd966-30b9-41cd-b94c-ddd816eb743f", "value": "6144:BqpagY1KtuZaBR0FhafHJ5wg0Wsmnbkzsp2ilVsCYwDiB:blG9BR07W4mnbkzNidYwDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726844990, "uuid": "fc6f1e9d-043a-4cb0-9fe0-aadbb1f54433", "value": 413696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844990, "uuid": "e5a3f7c6-bc61-46b6-ae38-f7464b7a0db0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efca6d25-7763-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726845658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845658, "uuid": "82967ec3-043a-4aa7-8e23-42aaf4a87ec5", "comment": "Malware payload", "value": "44304c76f3a393b95bf13d1d3f481b6d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845658, "uuid": "56452723-472e-4f12-977f-c893ecdae78a", "comment": "Malware payload", "value": "209ac5a7f3085cbd5851549dbd3e710182a292f02455990a2333782467d279c5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845658, "uuid": "bf6c9761-05a3-468d-8153-53936a19dd19", "value": "T1A7578CA1FCA685E4C30F4B7141AD413BDA254E306F18E9C3EFC26F0EA665EC0D47A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845658, "uuid": "e4105d57-24bb-45cc-8a4b-0397f630d36b", "value": "513329f6327380156f088c71d9864a0a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845658, "uuid": "4a65bb1a-6af4-4f0d-9a4e-b91e2048b91d", "value": "786432:8Q4Rn2EXCFYFet9dysiHtjohq3G5WWOJLZgBaWUA9tVQB92:ptEXCFYFet9dysiHtjohq3G5WWOJLZg4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726845658, "uuid": "96225516-fdcc-4257-ba77-17abf01f93c0", "value": 27281408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845658, "uuid": "5d2d233b-cdda-46e8-8089-418e56254f7b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17fc42c8-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726845725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845725, "uuid": "de36038f-5e24-43b2-855b-dd256b408504", "comment": "Malware payload", "value": "80c2ea3e4ca50937911a93d3a177fc26", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845725, "uuid": "346e8511-ad22-440e-a592-3cb6396a3b55", "comment": "Malware payload", "value": "9b59cb890949017b07d93b4bcfaf0a7372829c6892e49ace8a9b793563869358", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845725, "uuid": "df7e04a9-911d-44b6-843a-72669fb3616d", "value": "T10AF2B8567A22DFEBE56E827007F34A30679477952AE19284F25CEB481F302CD285F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845725, "uuid": "eaeef847-0659-43dd-924e-be3f83be133b", "value": "384:aKvtVyo/Ur00Aj3XViHb+j4Tf1JXP1XV6h3tyD+ciFh0MeInbJ5uVyePFh09:KSlittFD6XyD+BDeCbDsyIP09", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726845725, "uuid": "ced41a55-a65c-413f-97d9-91b2731acf8a", "value": 37308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845725, "uuid": "9367be19-eb36-4b6b-881f-7d509bc81f23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845725, "uuid": "546e9bff-dc14-4013-9ec3-e56d3e0e2d5b", "value": "t1a8f0ac14193c13f5d3c58d9d56edfb34646194cb55742e3b8d50d5a9e661e868d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "186b1a95-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726845726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845726, "uuid": "dde057d0-8b5f-4903-a6a4-b843b81a164f", "comment": "Malware payload", "value": "754e8249e3594d84d41bb10fa85ffefc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845726, "uuid": "f4dce8d3-e981-45ac-ad23-fd4a3f781801", "comment": "Malware payload", "value": "4e32c7ceb09f7cd612cfeeb4f291968455453c3b4a45efc2c1d297295d9ad061", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845726, "uuid": "b2b5cab7-c560-4a5a-9f5c-33beaeec525c", "value": "T1C104561A3E22DFBBF569827047F38920579876D63AE19584F26CD71C1E202CE641F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845726, "uuid": "db1de75c-f995-4508-a97e-20795b343f1c", "value": "3072:3mxJ1q2oirsWPAIQJmSlH1lzYeDQTwD+sS3XMyZp8JCh:3mx3dvPlQj5038yZp8JO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726845726, "uuid": "af8ea796-18b8-4fe0-bd84-d809e672bdb2", "value": 175764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845726, "uuid": "3c5c77f6-b33c-4a52-910a-7c784d0d6dda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845726, "uuid": "a7b5f744-18c7-4b05-b32c-64be3496f3db", "value": "t1c6419e180e7823f0a7355c5d09edef77a2a330db2b266d378e10e46aa76d9828d11c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdd4a408-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1726845726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845726, "uuid": "9a75fb80-0ae8-46cc-9efd-acbd54f07599", "comment": "Malware payload", "value": "4fcafba6ada32c3c77e53bb933130207", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845726, "uuid": "011f4b08-8fa0-498a-9b0e-356d37ded388", "comment": "Malware payload", "value": "3b632395d6ee8f30202ae638a2362c4b3101ba53154b1108e10a354ac0154ecb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845726, "uuid": "f196f167-3edd-4687-90ca-82b07fad6c0b", "value": "T1CD34771A7A22DF7FF169877047F38A60579836D626E1D584F29CD70C1E2028E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845726, "uuid": "e250d6aa-8d0a-49ff-aa8f-9ab3a4f20576", "value": "3072:4Y0jhbVsFzKk5RU/9suR+xH5xtIMuLcjMFI1ojz6F6hnxtH:4Y09bVyKoRuo1Zugjr1Ez9hnxtH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726845726, "uuid": "02c4f9ef-7599-458c-a36a-822ab16b18cc", "value": 249384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845726, "uuid": "a766a011-762d-4496-b803-c652cdb74ab2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845726, "uuid": "87314941-bc31-4e2b-b3e8-2d32d8ba0282", "value": "t1d0518e18097807e0a7296d9d459dff36d6a320db3e166d338e10e86eeb69f439d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd046df2-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1726845786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845786, "uuid": "4a7d4d2e-bd6b-459b-b314-f9bcaf11631f", "comment": "Malware payload", "value": "2a79adddcf32e6a6a494bbb624ab19a4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845786, "uuid": "b900b9c7-3126-4dff-8960-ab1b98022612", "comment": "Malware payload", "value": "7d71b6574161cef5ade0018ca9a86e5b2304a1b0c249dee460fdd10fdb8bea09", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845786, "uuid": "0ebdaa60-4dc6-42e1-83ef-b2f972a78af5", "value": "T1EA03E9523A61FFFBE56AD2300BF3862112E576951EA1534EF25CEB4C0F226C81C5A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845786, "uuid": "01def936-1a4a-4105-b72c-59813ccd6e1f", "value": "384:f65OpHEW0ar3sxZ0PPTi9dvybksBcMelhfELmorePasBmvnzvWSIKKQEoczViuc1:f65Rmmr91ybb7enwtrIF6nUoco3XV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726845786, "uuid": "0e56bdeb-b385-4dec-9ee6-3e01984ed3b6", "value": 41070, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845786, "uuid": "c9db76eb-3555-4f17-829b-ffde231702fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845786, "uuid": "1e8db10e-4ad6-48eb-881d-091a93de71b3", "value": "t19ad0a757817746a53f615c755c354aabad13931213a077b06e4bc189dc2b501b163f", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bccd6eb9-3556-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1726845786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845786, "uuid": "d743d189-c7b6-4c81-82c7-f626ffcae740", "comment": "Malware payload", "value": "ed9db4a4b4c991f63dc6ac04b3f1f6bc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845786, "uuid": "f0e9e02c-eefc-464d-8700-961821d71cd7", "comment": "Malware payload", "value": "c1248351b7474443e53a14be4901136077738798d34a93040cffdc6daef31586", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845786, "uuid": "dad3729d-8ba3-4189-9c33-3e567cd7a713", "value": "T1BB71555A7751FAFFE46DD33449F783286344B99125818B8DE208E5091F4274C0D6DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845786, "uuid": "803925de-faa5-4081-ba99-bf23a06961c3", "value": "48:uAq3rDtouoWyMKkNBv8sVwM5leoEJjWNUUUN53+vKtTGlbfU/VIBiE:nqFhNyMKkBvrVwalREnEmGlbfU/VIBiE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726845786, "uuid": "780326ab-adaf-4c83-a55a-8af6d84f99a1", "value": 3764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845786, "uuid": "5a016395-3225-4a4a-ba3b-be1b2f2c4b46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845786, "uuid": "d8bcb6ce-78fc-4092-85bd-44225f3cdf03", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8598f204-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726845909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845909, "uuid": "e4683f37-9291-4d12-a6b1-363257bdcc85", "comment": "Malware payload", "value": "67524ea8eff2d5819883eb3641797ade", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845909, "uuid": "6877013d-dfd2-45f1-a905-a16190a1c028", "comment": "Malware payload", "value": "0c254e668f10033ca5fc7a5c20834d66cc4581c64dc40fa9fa9b9af0f1d43704", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845909, "uuid": "18c6de51-ea97-4bfa-a169-93970a73e971", "value": "T10BD57D07BCA554E9C0AA933289668192BB71FC490F2123D73F90B77C2F72BD4A9797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845909, "uuid": "b28e2240-67e8-4bb6-82d3-73ff0e0130cf", "value": "49152:66VTCE1UQb3440wGJQRPnnLQTdaMl/GvVUE:o8bM9lO6E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726845909, "uuid": "4a3a36e1-97d0-496b-9b47-029db7db9ff5", "value": 2881124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845909, "uuid": "6d1bfcb3-1b19-4943-bced-90818bca06e3", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845909, "uuid": "b192147a-c941-454c-b9fb-186e9c824954", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ced48da-74aa-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846086, "uuid": "bc7e5b46-158a-4158-abbb-74900597cca9", "comment": "Malware payload", "value": "ae367ed7c9dac211d4fd3a451b8e6ced", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846086, "uuid": "9ef8c6eb-8563-4921-aea0-108c55862908", "comment": "Malware payload", "value": "bb2b8935d056e2341cd8383b3114d90242524665627b23bfc9bdf61074537584", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846086, "uuid": "ade19b60-f27f-42a9-b1fd-6f6e6a6d2e4c", "value": "T1EDB4D063F6A05ED1C8164AF45CE9E2340715F2A213C23642E3FE8D553C8F966BE8E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846086, "uuid": "f1c0c622-58d4-40a2-9f52-69e093b996c2", "value": "12288:/sjISVsz2gqP/bVH3KB8wVDOc2JcQpA3kMk:/AE21hHA4nM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846086, "uuid": "def8ad4d-678b-4b4e-b025-d2f7ade6e0b9", "value": 529220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846086, "uuid": "5b918f01-647d-4bd7-b802-905008200235", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "013822a3-6baf-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "4967036d-d712-4351-aa16-fa9763475067", "comment": "Malware payload", "value": "fb40926d0e73e29f58dfad687acfd232", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "d7470aa8-0abd-4795-b5db-43698ced434a", "comment": "Malware payload", "value": "955832fefb424daef7cde635bc0ad9263986554ea4ec120ce92075d0eb1b8767", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "c7cecdbb-4aa4-4c3d-9a8b-77b77c9a16a4", "value": "T1A9E015EF23610087EAD4FF0CE5650D10B00C23C026408F3CB9A0747E84A9A48F189E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "8aa305d2-6b40-4936-941e-2ca688ff206d", "value": "6:SbwACG5Z9vx0FbwA2KZcGjbwAlZSbwAEcZdbwAH+Gi+Yxo:L9GH9vLzccGw8LBqy8A5a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "d7350a04-708d-4531-9244-aa1065b49647", "value": 423, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "90411210-7118-4824-948a-9d38a3cafd41", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80cb2b46-6e8f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "0598469a-6e48-4c78-8db8-abbf062b73bd", "comment": "Malware payload", "value": "a03d134531499f9e9b76760a97d9bb9f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "31b52c70-5aac-41b2-83cd-c297c923deaf", "comment": "Malware payload", "value": "7a12ee52559aea6a8d3d24f863bc09e22d0ae5ecddfea84aea4c0ff79a7cd336", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "fe942757-d80c-4470-b7a4-855b5dd2b2cd", "value": "T1EB014BDF23910487E6E4FF0CF66A0D14B18C63C029808F3CB9A5647A80E9D48F18DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "8a054236-70ff-43a1-9c92-e9cb1a594e05", "value": "12:L9GH9vLzccGw8LBqy8A5SK3Fe8OW15yA1DFTFIbn:03WCA5oNW1P1Zun", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "689ca9c0-6ad5-47ab-9c4e-1b1571005dda", "value": 688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "ba79337d-7520-407a-935d-a905299ae1d5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "760d0954-74a8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "0a6e09cc-15e5-4924-854c-0202c0cd4b74", "comment": "Malware payload", "value": "2a40fc158c5bcc9d3b1de4a59a7b1d1c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "c2578829-34a5-41e6-908a-5fa43b3a8835", "comment": "Malware payload", "value": "a84fcde9984ead2a51eff25df8d70af4231f62292b672736bed425c572dbc1c8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "f473904d-5ccf-4b02-8de2-586056a6eded", "value": "T151B4BF42770E3EAED3B3783EC0960B16BF149F5085432F1751F5B61699632AB2F2C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "99c5b583-22cb-4087-8c24-1f02d6c6753e", "value": "12288:Nf9FrZfaxMlAYL4cnlLom65T4PgPKNCPMJShVhb:NPVfWJ5lmmVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "3090e54e-abd7-442d-9696-992e0e8c126a", "value": 509196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "d7d18620-2f50-4bc2-9cce-38d05a6c7502", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4df7a3d2-74ae-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "840a3988-afae-4f5e-98e9-2f57f666bf43", "comment": "Malware payload", "value": "39565238b0a8405ebe1815a9270896c6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "7274e40f-3def-4f19-8c50-9cf6b36e0a0d", "comment": "Malware payload", "value": "48c3c84430b7da90ba9d206671a6fbbfa725fd36ad872a755dd84f5d6757ecef", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "0447e655-80b1-442f-9b9d-51c5827657df", "value": "T156E43A41FB1C0963C9471DF0693F8795F3257A4240F89239331EAB5B3621E3A9AC77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "84c253cb-a812-410b-bc5b-9560b03154a5", "value": "12288:6ruub3PTFPK6WXOuc+nluEtE1VXLqvkft7ipq431CApo:+D7FPacglu2EnOvkftE1C7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "5532dd2a-b0f0-4c23-9d84-4e220a61dfd3", "value": 660656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "1256e25d-1e82-401c-a6d3-946cefe2f939", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98f1f214-74aa-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "4214a0f4-808a-443e-979a-05a197862d38", "comment": "Malware payload", "value": "79a51231b3eaf71b3f2853b2713915d4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "5771d47e-1215-42fe-9b65-27d2eec06a5c", "comment": "Malware payload", "value": "6bdab532899d00626304d8d5839cc5afc54ac4013f712cb4deeb12a2843d573f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "00362c2c-3c37-4d67-b3b1-5fbab19fbdec", "value": "T1EF258D52BBF1016AE2804A3586B2E7607A06D79238E4424FDF614EEFEF571710E85C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "0235481c-6c21-4bd5-baf6-4ddfd83b75f4", "value": "12288:b/rKGps3QxB0TEu+LIKFyw/SZpPta1J1w5g13Y5:beGpoQx1uKy9Ba19", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "76686786-bb5e-4493-a2c1-3714f4b1659c", "value": 1057624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "43dc70f7-a70d-4595-9eb8-57d0b1064791", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efd3f3c3-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "01769066-2d05-4df9-a8ac-ca2337890832", "comment": "Malware payload", "value": "ec90a3a2d4eb70b9ac144ec25c1db2ed", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "b2d272df-cde6-4a52-8d8a-c0e7a4fb09bf", "comment": "Malware payload", "value": "b6d87b48af6f51b5042e216a2e2d390fecfc7e6fd98f39b1c1fa1e0daf76e945", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "69067d92-5c71-4196-ab96-68f74feccb9d", "value": "T1264188CA11CA4A706CEB997A73E705E875C5D19220C9EF0690E6B8B56CCCE4CF1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "a2ba83b0-0f1a-470d-9bc6-abcdb5ee9a79", "value": "24:vpZDpoCAp8C8wpxTpy+KpCCCupc9pqSupVbp/XLpippsrjpHQ:vr+arwjwZCaPlEu6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "0cad09df-0e42-429e-8ff4-2a1380df8500", "value": 2373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "b1c04964-c01a-481c-ad58-afdac6a19d0a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efd4d82e-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "3dd00e5e-903f-4efa-8b52-0074bf0f91a5", "comment": "Malware payload", "value": "c3ee040a501abb358a7d55777743ef87", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "c8e3e703-96c5-4593-bf72-2c96c4b255cc", "comment": "Malware payload", "value": "7e2748dce287ab9c0f07e0bb4bbd249dc38dd462860b1eecf8bb156b7de6e173", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "3e1f95d6-d963-4ad8-9f79-1619447872bd", "value": "T1254146CB11CA4A746DEA996A73F745E871D1D19220C9EF06D0E639F55CCCE4CB1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "219db295-401a-4b13-ab66-7c94713bb363", "value": "24:vpZMPpoCxPp8C8hPpxcPpy+fPpCCCTPpcaPpqSTPpVkPp/XUPpi2PpsrsPpHkU:v0PjParhPsPhPmP3PvPIPiP1PTPKU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "daf0dbd3-66a3-4c28-aff9-c266096dafdc", "value": 2321, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "f78b50d9-a1e6-458d-9300-0b9367f678d6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efd6f17e-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "23424fb9-0567-409f-ab65-9ef215a32eaa", "comment": "Malware payload", "value": "1fb620bc2c73ed4cec048d4b5a138f93", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "faea0eaa-1c27-4bb5-a4a7-8942e84a8859", "comment": "Malware payload", "value": "af046ca837ee72a8cd0e45c01296652251825b38b776d1956162ed88f885e16e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "9fa2d1e0-52dc-42a7-a94d-4c3212d7c0f6", "value": "T1954199CA11DA46B16DEA993E33F745E8B0C0D19630C8EF0190E638B55CCCE4CB1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "559088b5-2d72-459f-8b0f-1eeb738ec888", "value": "24:vpZMpoC7p8C8rpxcpy+1pCCCBpcWpqSBpVkp/XUpiKpsrspH3:v0Rarrsr6tFwenBJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "9cbdc94a-c5e2-4c44-a5f2-536d3c0c3790", "value": 2373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "ff919f71-b6e3-47de-b6aa-59a64ccfebff", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efdc4b9c-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "566eb2b1-970a-4d0a-bf4b-73be455fc8ae", "comment": "Malware payload", "value": "4b7b777b79593866fc3fbb1de64f262a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "8c895add-3158-4484-a5dc-b0a4ef631218", "comment": "Malware payload", "value": "767ec8c058c8efa0c3132a0e637511072c2f439965914da6d9fb75c68c625ae9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "08a768cb-f9d6-4fe5-b25a-5d28707a90e3", "value": "T1714189CA11CA4A706CEA996E73E705E875C5D1D220C9EF1691EA39F56CCCF4CB1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "b0ccb7dd-b21d-4e6d-979e-110e6d008c0d", "value": "24:vpZ1BpoCOBp8C8+BpxFBpy+kBpCCCQBpcjBpqSQBpVNBp/X9Bpi3BpsrVBpHNO:vnEarCvCBowrtWUi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "7bb72428-8891-425e-8ca8-074766cf0955", "value": 2334, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "5fb5845c-ffce-40cf-a1b2-d6c437fe3ba4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efe0bad4-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "0827d56a-db11-475d-9387-5eab4c560538", "comment": "Malware payload", "value": "a314fe1dba06fd6c029f734c5cb897a2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "bdfe8ad6-0b1e-4d6e-9398-011f653085b0", "comment": "Malware payload", "value": "c5a562f169fd074a753bf21244bd0d2a53f2e840d4ce842ca91902c68f95f3f4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "70560758-132c-4d85-9463-a11f3c0ef368", "value": "T189417ACA11CA86B46DEA9D6E73E745E871C1D1D120C9EF45D0E639B65CCCE4CB1C2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "7d91574c-c7c0-4e3b-a7e6-05387785fc40", "value": "24:vpZFpoCqp8C86px1py+ApCCCEpcbpqSEpV9p/XNpinpsrlpHK:vt0ar6l63YwhjeEg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "f8838376-c06d-455c-8829-baaa27b170a3", "value": 2347, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "0455fe60-4654-412e-bbff-d9770288ecf0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efe3bbbd-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "fec0752d-cbe1-4146-951f-465d8ea49ea5", "comment": "Malware payload", "value": "d630232feb470d79dc2c12168c81aa84", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "81df223b-696a-4c99-9979-dca214739e7f", "comment": "Malware payload", "value": "fc22a736f3267b0bfc4a8711dcb80cdfce2ae4d8c090930c23e54ba47ddd2c34", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "fd3369d0-3ba7-4cff-9781-a5e23653fb4a", "value": "T1C44131CB11CA4B756DEA996E73B749E871C1D19220C9EF0690E638B55CCCE4CF1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "2d22dec2-a624-454d-a3f0-eddf5eda4efa", "value": "24:vpZ0poCLp8C87pxEpy+dpCCChpcupqShpVsp/XcpiapsrUpHv:v8xar7U7K1tQWvhx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "bede6f48-4650-45b0-b450-4ea1c34b1063", "value": 2373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "733eb831-b7f7-4b7d-9244-634064ab3aa8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eff01c85-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "544d0deb-c7ce-45ce-81e3-b1cb75fd90e6", "comment": "Malware payload", "value": "371a4326950dcdfe0d460388a5208efc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "f74c6b17-df0a-49c4-952d-c72a1023d202", "comment": "Malware payload", "value": "f7304b803ca5d25736017a594004981ab25a0a28472592ecf761f439c133f1b9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "be36e466-38fe-43fd-9642-7e8717ed24af", "value": "T1754197CA11CA8A706CEA997E73E705E8B1C1D1D120C9EF4690EA78B55CCCE4CB1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "606ee241-20c4-4aa0-8b54-d2c95fcb92e2", "value": "24:vpZGpoC5p8C8ppxWpy+TpCCC/pcopqS/pV+p/XupicpsrmpHR:vOParpmpMrjqwl/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "af680e98-2bd8-4e23-872f-c3f5270561d0", "value": 2321, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "9f997d31-2bf2-4413-9862-1659c51eb8ba", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "effd8398-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "c7936b4f-e0d3-4d99-a504-c3f907361a2a", "comment": "Malware payload", "value": "be01aececef0d592f8e5bf942a41e323", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "5aeedc2b-5d6f-4b89-bed3-e86eed2b4a9a", "comment": "Malware payload", "value": "cce538d8619a7de1a34359fd6fe88cbf4d7e7fad4ffe4bb8ee5a408d1f67f051", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "932442e0-a6c2-47d1-afde-d810ae2d1ea0", "value": "T162418BCA11CA4A746DEA997E73E746E871C1D1D130C9EF0A98E678B55CCCE4CB1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "7cdec9f5-60fc-4fc6-aab8-98d63696a024", "value": "24:vpZopoCNp8C8dpxYpy+npCCCTpcKpqSTpVAp/XQpiepsrIpHT:vwDardIdufXMyJTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "20c2603a-a2e2-4e91-806b-0526e627385d", "value": 2308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "57fbab01-6bc0-4fb5-af24-ff36967588d5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efff954d-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "f7e41c82-7fa8-4d71-b73d-9e6ed4d38732", "comment": "Malware payload", "value": "43794ad82513c6a699342cc3be8871c2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "09f97dea-431e-4bb1-bb16-23c40fb70da0", "comment": "Malware payload", "value": "92c78126a5b27f1ba2bbd87755d6c9dd1128023fb3fc45d34cc5e25532e7d881", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "56aa5cb4-0296-49e7-bd34-d857f5d9f87b", "value": "T13EE07D2FC00280FF60009D4A6EFDB958B10F229663860628567C55135CB8D4C60404", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "ad69a747-0561-4555-84c3-0dc6be0bbb00", "value": "6:/QEpN4PVIWyuVYMmJpBo3F5kJVKE6LsVKE6NiVVNDV2uVf6vGujh:/QbeWyuCRg5sguThON", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "b833c896-0321-4076-a413-611a24003796", "value": 305, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "7f66eea7-b446-4125-bccf-7c7b6bae558f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0004e72-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efa39b92-c84b-4be0-89a7-efb0aa5ca2c5", "comment": "Malware payload", "value": "df8deb93fac06b53cc3566bd6765cb29", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "7d707b24-fa36-4054-a2ec-3218a3d215cb", "comment": "Malware payload", "value": "1d09e0db23d48190d232c7777e07ca0981661947b42ddf25c0e61aa3ae61cbbf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "91894579-45ec-4e4a-8051-cf5b8411d4ca", "value": "T1C94188CA11DA4A706CFE9D6A77E709E8F1D1D19120C9EF0690E639B59CCCE4CB1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "2a5e6957-fc04-4332-88c0-1048fc874ef5", "value": "24:vpZD9poCS9p8C8C9pxT9py+Y9pCCCc9pcx9pqSc9pV79p/Xr9pit9psrj9pH7K:vL9s9arC9j9C9d9Q9o9f9Z9m9c9hK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "7747842e-eb17-479b-b2b2-ae65f6002710", "value": 2386, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "aaeb3c6e-c26a-4b6d-9357-eec08152c864", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f011a9cd-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "e2c14efc-9f8a-426a-ada7-1ae98727ad39", "comment": "Malware payload", "value": "c50f13d84bf1e95ff7b2c823662b1d48", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "fbe94da0-5336-490d-82d4-6a2e78a0b208", "comment": "Malware payload", "value": "5db3f3621c74258f5eed06d23f8d3ff7a0392fd1f998aa61ad02d101b72ce610", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "1d5c5bdc-40bf-435e-bb3b-8b164b98117e", "value": "T1DF4189CA11CA4A706CEA996F73E705E871C1D1D120C9EF5690E678F56CCCE4CB1C1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "8a57d002-245b-4567-9036-7c1e8fc61f48", "value": "24:vpZWpoCfp8C8vpxGpy+hpCCCFpc4pqSFpVup/X+piEpsr2pHB:ve1arv2vU5RCAzFr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846087, "uuid": "f360fb5d-3603-4f17-bc45-1a7b94e7f909", "value": 2334, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846087, "uuid": "a3ebb7ca-24c9-4c10-aadb-2b81e1503e8b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f03c8971-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846088, "uuid": "35a58b19-edbc-49bf-a58a-b6688d665305", "comment": "Malware payload", "value": "a9e2ecc78ed836f29c3dadfc58b2d01b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846088, "uuid": "339f5a57-60d8-4e64-a992-9e37280faafd", "comment": "Malware payload", "value": "093a0ce24ea3cb10f90aa2a8827ef5e150d2b60af7337ea3b6df45fff54da686", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846088, "uuid": "014bb36a-cee6-4647-9b1e-7d541f2848f6", "value": "T1E74198CA11CA4A716DEE996A33E705E870D0D19120C8EF16D1E638B55CCDF8DB1C5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846088, "uuid": "e2b9dba6-f99f-437f-9ccd-9a2e745634de", "value": "24:vpZcpoCpp8C85pxMpy+DpCCCXpcWpqSXpVkp/X0piSpsr8pH3:vUHar585iLzYOdXp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846088, "uuid": "899475c3-b993-435e-8342-687bd73348ad", "value": 2360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846088, "uuid": "33c868df-82a4-41b3-a2d9-7532c3513796", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fddd5bdb-7608-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "71251d58-8692-4979-99b5-357b5e25ef24", "comment": "Malware payload", "value": "b50ee0fa593cdf5390716897fa9e6380", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "b5e7b69d-6f8a-4c63-8c95-7dab062eb84d", "comment": "Malware payload", "value": "bbfd7159531f5e0d00b22b6747b4502df905e8c73c36ebf4ab84b7d44e082e52", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846089, "uuid": "08678748-1cca-4c79-ba39-111ce75897b5", "value": "T1B2932BC16D43EFB3D88B1AB913F357224931F92A0A1EDA85E32DFDF59E42184711A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846089, "uuid": "01e3b44b-34d6-4d9c-a7db-22a45d61d618", "value": "1536:UXO06d84pnII9f96BxTH2/d+URy8626Tdle6VY+0QqSqhHfECk1NYnGpsuZ:UXfG84pnIIKTBURA26ple6KTQuhHfECc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846089, "uuid": "d8d162ce-0623-499f-b2eb-7f6d21c37b83", "value": 94159, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846089, "uuid": "5bb62feb-35cc-4343-9b56-fe114d6d1ae2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846089, "uuid": "05f13ad0-69fa-4a73-896a-9d63fc2c82c7", "value": "t1c5212cb3ab7102266a91c968dcfc97a2211dc7171244fe73ef30c58c202e01ea227c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86c374f1-7765-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846340, "uuid": "287ca5c2-cb9e-4d96-afca-da159c5c5ccf", "comment": "Malware payload", "value": "425188a4e4113c0710951f80dd7fa579", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846340, "uuid": "0b8c939c-02c0-4059-8ba7-3d903e0b7ff5", "comment": "Malware payload", "value": "4c173fac511c72bf90986cf8f4691b8d51d1b0ad837e1fbd10025530e80e5d48", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846340, "uuid": "19c63d4e-a02c-499b-9eac-3e6ea058bec4", "value": "T1F534F120BC71E87191082AF5514B8FDF47B042AFDE19575C3EBDE2A74C08E196AF58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846340, "uuid": "54f3dd96-4230-4e0e-b9bd-8f392f73ce0c", "value": "3072:yCuWVbROXJngV1IALpIZp5gS1vaVmIpFHFY7ix3Lvixk3oL2ylzyP3iNzWnu:yjWVbR0JneIsKpmSAIIucL2JzyP3iNn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846340, "uuid": "b03c7356-1663-4bed-bd49-5564da21b287", "value": 247883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846340, "uuid": "65b2a211-2cf7-4a87-affd-5f195c316c40", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5020c363-7766-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726846678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846678, "uuid": "32fc8314-20d4-4c7d-9271-1935f44c5134", "comment": "Malware payload", "value": "38f41466d936e5e4edc1eaae88f698cd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846678, "uuid": "9ede91b3-0e91-4b2c-9ee6-62cd1d7ac5b4", "comment": "Malware payload", "value": "f0d2d7046c0fe6c450cc80447ac8e4129f2140d7cef3cce80fd376f25820416e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846678, "uuid": "ef2e38f7-8220-4d78-b141-c543300a5210", "value": "T144F53347D2F28539E1C356B94EB886420B2E3D257FB1501D299A83EE5FFB144CC2EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846678, "uuid": "3ad9af20-16e9-4cdd-9fe7-499efbb596ed", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846678, "uuid": "5e9e4ca3-aee1-466f-b7f5-919f7c955218", "value": "98304:MxGEBUKdyndyEDWEWqfeXY5jEETBdlM26rbT44T9viOSyu:EGiUqynOEhaETBn2rH4oviOs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726846678, "uuid": "73534663-b34f-4ece-a993-c2dce57bbd27", "value": 3591467, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846678, "uuid": "4e29aec3-2cfd-46b2-82c8-7820da97259f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25fdc7db-7768-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726847466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847466, "uuid": "71858e22-b093-4ac1-9462-9ef8f019ba8a", "comment": "Malware payload", "value": "1fedf314d7c5ed06ff6833c9c8fe5441", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847466, "uuid": "230ed4ec-2b49-4657-af76-05c939574ac2", "comment": "Malware payload", "value": "279af267d365013227156575dcf61b6977ce4051dd4632515bd224314cea7c59", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726847466, "uuid": "e2a4090b-36a8-4ec2-82cf-e57e06d28772", "value": "T161E5BE5177D4CA2BD0AE8736E473892003F5ED01B3D3F78B69217A7E68B23428DA51", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726847466, "uuid": "a9976c06-f2fc-41be-bf9b-3d97d2d361db", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726847466, "uuid": "6276e05c-fbcc-45c0-9497-5a1737e9847a", "value": "49152:9f8m3F6fh7gW5YPOAfS7kALAcRbqIvKzHuXtkHZC1:9kmnW5mOkSgiRbIitk5I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726847466, "uuid": "70c3edd2-97fc-4a68-85b5-216682a75b2c", "value": 3141632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726847466, "uuid": "38bc4e41-1431-460f-805f-846787d536f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b9a14d0-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848066, "uuid": "9404cced-79a2-4613-9173-f8e430ff934e", "comment": "Malware payload", "value": "a882500de497e282f4b6a80888a790b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848066, "uuid": "cc58ec5a-f096-4680-8766-b4cf00d9ef32", "comment": "Malware payload", "value": "e3785343a1fbb0f87c29404ecbc9481b8df307d60a0a4e9605a3de08b316bff2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848066, "uuid": "e31d2f23-a093-42c4-8b60-536154ef799e", "value": "T1B463B505BF914FB7DCAFDD330AA9170135CD645B12A93B3A7574C828B20A64F5AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848066, "uuid": "4a7f4bb5-6125-4239-af80-f2682c72dde9", "value": "1536:vMwZvC6uCjZ05hPono851FmsZTNEpsaE8:vMwd0hFs1Ys8v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848066, "uuid": "94d16818-2b19-4426-a3eb-a9fdeacccd55", "value": 68944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848066, "uuid": "bb03d080-2a70-47d3-bf65-e87b52e16d08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bb4c073-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "180a844b-d6b1-49bb-802c-b1dd806568e5", "comment": "Malware payload", "value": "67d54aaf0f6f7c66e2d23585aa3fa101", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "8f8883a2-ef37-4826-866e-f9c4beabd23e", "comment": "Malware payload", "value": "9810dfc4f19b06f1e6653dc42323ce5b37d5aceaf3853c2ffab8eaadc1489b09", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "de2e3178-531a-4171-935b-aed15697cb5f", "value": "T1C6E07D9F800181FBE0025D44AEEDE948B50E3E9657870B18967C21224CB0D4DF4815", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "6f5044f5-f660-400e-828b-4cca7548abca", "value": "6:/558ILwOdZVYMmJpBo3F5kJVKE6LsVKE6NiVVNDV2uVf6vSeRh:/H8lOdZCRg5sguThQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848067, "uuid": "ede56c7f-37ea-44d4-ad03-7dfa79711e75", "value": 324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "c7407c19-1152-469b-b5a4-9478e11314bd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bc152dc-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "c9fbb1c7-9b65-4355-a813-3ba32024fc74", "comment": "Malware payload", "value": "31ccd6d2788b4e7c2fb22a7bdcc06a87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "6b72ad30-070f-4e6d-b0d3-84d68c8fe3a1", "comment": "Malware payload", "value": "b2e2d449c6115798d17318843be723aea8833f240a0b533e316032e40a68a2b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "c3502368-7c07-4dfd-9350-f6eba5e6ea47", "value": "T1A8F23986F95784F5DC0B0DB060ABB23FCB30D92941B08A6EEF94DE30D5B7941D2032", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "6d5cb305-b7eb-4581-abee-f6474e884c2f", "value": "768:Wc+pUGMG2QnEbPt2Vg/GdAeL1PgTD6qUadFTtcl8P:F+hMGLEbPoiJeL1of6qUitOq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848067, "uuid": "0949214f-6bab-420c-8d68-1da22fe338e3", "value": 34576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "d5ab90c8-afbf-4360-aea9-6589934692ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "f69aceda-6fb1-40eb-9aba-ecfa774f26a1", "value": "t1a811c0a1bf6219ecf2e1ac4d5b5f214397366aa29a3324b844f52ec737f1110c0768", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bd34c95-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "44dfba71-cc46-44c2-a280-c97c3c332343", "comment": "Malware payload", "value": "259ef5f8879a83aad53b5ba66b9e9a07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "4d2df31a-8ffd-46dc-a7da-db5805cf3c1f", "comment": "Malware payload", "value": "dcab3f85f4ab4da0be627f1c508f8ca3e48cf226d1f644ab740055ef06efc2fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "beccac72-bad5-403b-b298-cf156db09735", "value": "T1BE335AC9FA8BC1F9E81709310163B73F8B71E9164075CA6EEF59CE35DA3760092172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "f68b89ec-50ae-4a2e-8d56-3f47315fd35f", "value": "768:1gHEUwMG25WEM8jw/o/iZBJbNWUTphT43N9EXbqONAUeEy5w0kLTW8CI6X4j:GHMMGmtM8ZiZnNW2sXEr5AVLkLTW3qj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848067, "uuid": "2dd8ad17-f622-4ab7-a8df-1668e4450fb6", "value": 50352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "9da23f36-7d45-46c2-a650-d1a538f8ef35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "577add65-c0ff-4f1f-85a3-42ca27f37b00", "value": "t1b821efba6e7218fcf3d0bd0dc72d4bd3ab39c663255130b941f2260523f21a190a19", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bde4c28-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "27fee9ff-9812-4f95-b15c-d5b8e2f2d7d2", "comment": "Malware payload", "value": "6c4111a4f6d9b47be905e9449aed5bec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "c863d148-80b0-4551-b4a8-475d5bf14a86", "comment": "Malware payload", "value": "1f92bd07bbda65b400cfe76863444a608894bc1d188d5163ff4224000f8cb8d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "1c568e92-fa25-43a9-aac7-01050126689e", "value": "T1D7D33B46E7418B13C4D61B79BAEB42063323AB5493DB73065928BFF43F867AE0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "7c3eafde-21e9-472c-9403-342869d31686", "value": "3072:LO9sTZtmaqWH6AnE+96ntKOyXHKIPKM/9RRtn:LosNtmaqWH6An79TdHKIiM/9hn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848067, "uuid": "2ac9133e-3cd5-4704-8da1-8f95d96b08ea", "value": 135037, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "b6a07fdb-e628-4326-a948-2dfa04af3088", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848067, "uuid": "60e8a8c9-50a2-4a73-a9d5-8ebe4f299776", "value": "t1f321f1252b3551296e61eda4edfd97b21525572323409b32df26c4cc181f066ea2fc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aed5177f-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "0a787675-dd6d-4d57-9421-5d60415e6b46", "comment": "Malware payload", "value": "676c1dcc665cea3921b0b66cc756e8b5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "8bedd4f7-44c2-48bb-ba7d-4b5a263d36d6", "comment": "Malware payload", "value": "cb53c770aef8a7eb6b0203158dcc8a73eadad7c0710c53c74b1631cd9e565df5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "7e4eb1ce-2602-43c7-af26-c8ceebf41348", "value": "T16B236309BFA11FB7ECAFDC334AA91B4531CD641B21A43B697934D818F20B60E55E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "c25e95af-4837-4a39-8f48-af6b1dabb5ea", "value": "768:qrfH0AKa5KptU5es5eCeOemKeFm8F7ZR/u1Xi424fmVf7b:qrfUrq5vxj/K+mm7ZRGtmh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848126, "uuid": "ec89201e-2dee-457c-ad5f-d20f3bb280ff", "value": 47080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "35361cb6-6cbc-481d-a9d3-2875830a40a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aef31ad0-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "7aef2083-ef66-44fd-b0f1-56f98a9c3ca4", "comment": "Malware payload", "value": "19dad4c81a132c2f56cfef4200247153", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "67313bcb-eca2-460f-85ae-ac8b537ffe20", "comment": "Malware payload", "value": "8d2630c56841b247afba8def549b14c745294340bbcd8a5f19b1a76157dfa9df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "15fbeba1-8ae9-4f86-853f-39b5ab17465d", "value": "T127C2F682E5D2992BC5D0623A7A5F155C3321B3D8D2CF3707E9247B20AB4E62E4E73A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "070b9058-8f0b-48d5-95e7-24a999e936ef", "value": "384:g2+41xBpl6ss8caHgEAT3N6OKDbLxCkv82Z75hK0BKl3iYph5ToWE6p62hbYiktt:g0xtxzcaTAT9EUk9hKhxph5ToW/Zkv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848126, "uuid": "5521245e-38f9-47ce-bcf5-7ec2cc05cee1", "value": 25908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "97c00fe0-72bc-48f8-8f9f-cbe730cb3da2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "5d7fc758-9b36-4202-b046-e720e8a24294", "value": "t1bee02b44fd699a185ceb9a749ddd47b49401221351664b10cf51d6e4883f014e30cd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af054121-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "e47f016f-5d19-4cfb-8b8b-8524a265296b", "comment": "Malware payload", "value": "f78c60c39db48ae98c194b42ac364ab4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "fb91008a-8588-4c69-90d7-11f07f0087c8", "comment": "Malware payload", "value": "cf45d78499e0aab466d31e114fa6f6b3c93a4d1f8613fc35a4fca745483a527b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "8da9b44b-b0fd-402a-b1d6-70c8a5eadbf5", "value": "T1C4C20782A9D19A6BCAD0627A7B5F115D3321F3DCC2CF7B07CE150B00774A61E5E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "3eae66c3-4dfb-4900-8fe4-2f8108665a57", "value": "384:vUVpCVqPKs2w9maO006CkOeLNSsvpwD9KBdRPrtWZ/C4f6BoeT6j6QsqWhpfJRNe:vNVqPB2wJOnaW8Bnujf6BoeXLN8V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848126, "uuid": "b7ace9cd-b8db-4d0d-89ed-4f8e17f4a501", "value": 26168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "39ffa700-d410-4813-b357-30c24fb1bb78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "03df18e9-520a-47d1-828b-b9c75c876a20", "value": "t1d8e02600ac6596288cdb9a749d9d07a499002213605b4b10cf10daf0c83f448e308e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af51018b-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "8075c1c0-4754-4355-af3e-3c8691a8ec4a", "comment": "Malware payload", "value": "e92bbded2c5e4b512868a41e5b873b3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "8a75dc20-8f03-4c5c-b5ec-f2b35262f6ed", "comment": "Malware payload", "value": "725b3a1ff5c8946e71aeeb07738adb68fb0c49c99741165096cda38050c485e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "284126cf-13f9-4efb-8c14-9d3aafdfc583", "value": "T179F21A81B8D1CA13C9C45277B72E029D37396398E2EF73079E126F51378A82F0E6B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "f1ffead1-8006-4cf7-9374-8c1aad67a4d9", "value": "384:PZsNleGVfU6UoLNBMxVIKDnSBIRL7bHFOgA7o7P6267tewZOyigNmx1HX5yusBi5:PWNlpUk/UlOBbgA7o7uQMNmb67uW27", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848126, "uuid": "ea83a8db-bf1f-4b54-a5f1-e917b6aeabad", "value": 35112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "d20863e6-1feb-40c4-9bb0-7d783c9c581f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848126, "uuid": "11725c26-6bb6-40e8-a581-f2c7fec55e10", "value": "t1c3f0c96098c84d4df291da3bc48eb2330b4e62eaac163c2024e34e84cbb22e515622", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0259fbb-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "0c7c6349-116b-48ea-bbee-50c4dee1795b", "comment": "Malware payload", "value": "60b449419991b0995c289daa2f356fa5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "cf2994a5-d473-42a3-b799-dd373ee77404", "comment": "Malware payload", "value": "afdb1f2f0776fbdff4ea794aef5637bbc5ef8fd686ada1dc59cebf98cac121f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "e7669e47-4ada-407d-979c-f9aa9c1cd271", "value": "T191334C95B9815613CAC15277FB1E028D3B2A139CE2DF73039E16AF21338B96B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "abb54f62-6a7d-448a-bfdc-b668d7fbf867", "value": "768:VMjYjGiayREhqVlgK1FofLc0twBmrvmSFu7MErHLm30NL/DJFVezt8vBQIo:PjGYVVlgK1gWBmf7oH86LD78x8vKF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "e69fc457-23a7-46b7-8219-9300aa622fb8", "value": 54788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "26a8e12a-0043-48f4-9c60-cfea6c9e1d9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "e6d2e2f6-7a15-40b1-8e50-171b3efa500f", "value": "t146217d50998c45d8b9a54f2e85cdb337724925b2ec7a3c110fa7b54ec7379e170219", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b032cb44-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "7b37e084-b508-464c-a153-6651b237b651", "comment": "Malware payload", "value": "7bcb54102d76511b7d0db62462264b3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "71eddc5b-3131-4ade-9521-7fc2c604de1e", "comment": "Malware payload", "value": "e4fabbd93f3ff7a3001faca538a05e43f4500ad0cb1434c114d892ba74808a4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "26690baf-016c-4b80-b4f4-c225cf3b3e9e", "value": "T1E1B33B4AE7808B13C4D51775BADF420633239B54A3EB730699286FF43F867AA4E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "ced0f9fd-7d4c-42a1-8467-ffb1b048bd34", "value": "1536:8anjU8cq6qo8y34afV3WMloY0uK9lI+ieZtG1HNg+zp/+qzw/9uatflsIek:3z64yoafV3WMloY1qtGR++9/jM/9ualX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "95ad265b-0145-4dc6-a50f-c60e40ce5596", "value": 108386, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "da2d30f0-e607-4794-b88f-7ca66a8831bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "dc31ebd5-a32c-4e0e-b978-34e42f1e6336", "value": "t154111f3167309519aea1dd50ddfe53b22224471327849f33df35c0cc641a0aaea3ac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b039e81e-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "711ab2ee-bc99-4cc4-8300-8c24d30fa13b", "comment": "Malware payload", "value": "d566b6187cef524abc470e231cbe0cd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "151a0502-e0e1-4e80-b3ce-fe0ad46a61bb", "comment": "Malware payload", "value": "0e5c625b098f0f27f84a6085e5ffed8f04454ce7a808b8b4d695b9bc9a837817", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "e6a1763b-c262-4a3d-b8f0-a6aeac9b4a8d", "value": "T180E21C89A983D4F9FC0605B17232DB329BB6F93F216DEDB2C3A58436C841902E5477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "5225faa3-e9fb-40c5-80e5-7bc4562e4321", "value": "768:unkQrwVmQLMrWvrfjteFyyuqkbhh2tTAWDBHn:SkQr0LMrWLjA9u/hWTASBH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "1a5cd6e2-a852-497d-825e-dfa9a45f286b", "value": 31600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "9a326f70-3628-43fe-a730-f4364363bfd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "d2c302e5-5a9e-4bdb-8ca6-00b189fce96c", "value": "t1041122f57fa20cfcb2c1bc1c5b6b6603ab3a26871a2164b948f530023ff3064e0621", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b03dca0d-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "1a0d5841-e61a-4756-9f0e-1163837a3613", "comment": "Malware payload", "value": "25c23f0f5ffe9da2f35af9828afe3dee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "15a45f74-a41a-4290-b6ff-4798081445c3", "comment": "Malware payload", "value": "d723d33c6120ca6ec4534e67b31a1e1c4953a480d6fed924c2f5711e481fb3e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "2079f0d3-2c57-4f06-a832-98d16d1af794", "value": "T19BB32A4AE7408B13C4D51775BADF42053323DB54A3EB730699286FF43F86BAA4E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "d5ac24ed-bfb0-477c-81fd-3ecd038cca0a", "value": "1536:8anjU8cq6qo8y34afV3WMloY0uK9lI+ieZtG1HNg+mrt/1u2VuatflsIek:3z64yoafV3WMloY1qtGR++mJ9xVualX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "e24d1561-af1e-4f60-85aa-9a836dfee61e", "value": 108386, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "bc0c861f-85ea-48da-9158-03c1fb8b5844", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "786a0edd-78ea-47fd-988a-3d0fac24b531", "value": "t154111f3167309519aea1dd50ddfe53b22224471327849f33df35c0cc641a0aaea3ac", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b045a829-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "c8e54d6c-1f2f-4a4d-a166-89ae6f68e5f7", "comment": "Malware payload", "value": "4993b1d67bf1db9808434016b7497cf3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "54065eb8-2c6e-4ba5-ab51-d55769243b7b", "comment": "Malware payload", "value": "ca66f26061129501acdb2e60010a894bf8fff4ce01d51ebf825284bc8572d1ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "101295a2-6a73-4963-866e-b8c153a4e32b", "value": "T1D523734D7E228FBDFB9C863447B34A20665833E527E1D684E29CDA011E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "2b6a8dec-2a60-465a-91bc-d25d909f8f1c", "value": "768:o6VjAe+DXtDXKMDXlSg5FrvTCO3btPaDXc3gLlViAwzIqVu+UeAE:NjX+DXtDXKMDXlSg5BbtPaDXc3gKALwH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "383c20ca-f888-442c-98b4-1ce541544493", "value": 47080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "b76f88a9-db5a-4e19-844a-d019d2d08541", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "210a8d0a-6c5b-4f40-a981-222837f9f512", "value": "t1c5011d68493c17f163851dddabecff70a09140ef9a611f33cd40e9aa9b25a465d01c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b055d5c8-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "3d19b47f-a872-49a0-8f59-8611fa9b318f", "comment": "Malware payload", "value": "72a3031d08a22fa00f1905aa8548dbff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "0577429d-ee27-4b4c-826f-e68d98a74d44", "comment": "Malware payload", "value": "e151a146936e21d35e67ec9c64a2790867717b7082c8af77024222f0345992cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "8faf4f7e-8b08-4f6b-9927-f387410fd64c", "value": "T1E4236C89E683D8F9FC0708715133AF7387B3E46F1159DB46CBA89931D822621E61B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "0ababa3c-add5-4e43-96b8-8e6ba086ad69", "value": "768:P7oSPJ8qkVYudPZVpjIp+ez+8UxGZhwb7D/1Cyn5rj7peYOUbUeb8E5SvCICX:P7oSGqkhhZVpjc+ez+8UO07b1Cyn5rjH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "780c6f77-8b46-48b1-90cb-734700dd25ae", "value": 46256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "53bacf14-bbbf-4aad-9559-59008a0e2425", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "ca04ccf1-2f81-452b-8c41-eace810150e3", "value": "t1dc21bfe17ea608fcb3d0ec8dd72f76d35b72a9630a50a4be04f06e9632e1061a0219", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b055f202-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b6c16893-ce99-4a40-948e-e4ad472154f7", "comment": "Malware payload", "value": "f375d367e5f9863da9ab60a092e12cbd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "cb9c4e68-19e3-40d1-b496-3635a61b94f8", "comment": "Malware payload", "value": "28da25d475a048e7ddbbce47017fa1153cd338502babf361a0b7f81b21646c78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "91e79f78-c3d6-41c5-a33d-5a5d9eb85b4a", "value": "T1DD031807B6A2C0FDC86DC17847BBB439D437753E6239729637E4FA3BA989D212E194", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "92405d39-f5d2-4621-b47d-9336fed1d773", "value": "768:exM82dQWGioIMOydtoYOPHcPexTL1a4rDwlIhPa:FxdQWGVIed6O01a4rdhP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "805cca86-7fe7-46f3-a049-31c58b04b512", "value": 38144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "fa78992a-3d0f-4541-aa53-30677f9a777c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "35327dd8-b974-4dc7-86ef-ed56dbb908cb", "value": "t1dc0124f636356ce470d7f4a2a325c5218d3c0c69106132e7e570b8de6f21f850d11c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b062add5-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "4b0c456e-5375-430b-b93c-8df49e7c76a9", "comment": "Malware payload", "value": "c5a7597174f34e5bfef4ca063a024e36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "731bd425-ac06-4dd7-9856-8ac443da9214", "comment": "Malware payload", "value": "44e5a671bc74a505710ddec45ec0aae9f6709d70c1193fd83a6f4f452ed194db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "14b275b6-dcf6-46a1-b968-ea104b763cb0", "value": "T19CD33B46E7408B13C4D61775BAEB42053323AB5493EB73069928BFF43F86BAE0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "a03abb01-9184-4ece-9713-8b1ed8bb3534", "value": "3072:LO9sTZtmaqWH6AnE+96ntKOyXHK4K6xVRRtn:LosNtmaqWH6An79TdHK4K6xVhn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "b764c810-6467-4a87-9a8d-e0f619af6784", "value": 135037, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "3f1617e9-8658-4512-a720-3e178d976558", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "5e06ef24-80da-4f9c-b39c-c6ccca0981a5", "value": "t1f321f1252b3551296e61eda4edfd97b21525572323409b32df26c4cc181f066ea2fc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b065c71e-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "73fb026c-a512-4aa9-b065-6a62f5566168", "comment": "Malware payload", "value": "c3f8d3cb4762fd27d6626a7d6c33d2e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b528e544-37f8-478c-ab13-a235645081e8", "comment": "Malware payload", "value": "596613b25032e7529bb64dd157734647cb0ed09a199890625419edf87c6f1ac9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "f980d342-ea17-4766-be8c-83917fedde6d", "value": "T12D63B65D6E329FEDFBAC863047B34A20A798339527E1D684D29CC6002F7028D645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "f5af06bb-1f87-49c5-a30e-0e3127268b51", "value": "1536:ZEsl9JVBEBsM5JiJx32ln0jly5qT7eOBNlYu:ZzfJYBd5Ji332ln0jly5qTHNlb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "8d0b1c3f-0951-4923-95c4-cf25a47af1ca", "value": 68512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "f400727f-b0ef-4aa3-bd02-eb35f4335f7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "b0b2c933-0439-496c-81f0-049e7b3c62d0", "value": "t1b4113c58893852f49b721cee6bedfe76e45170df85125e378e00edad9a2dd424d00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b07ad5c9-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "89b3a556-ab7e-42fa-a893-301d7816cb2a", "comment": "Malware payload", "value": "14e20246c5525fe85472eb6fb023d498", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "0649668e-b375-4af1-be07-c81ba2aa63b4", "comment": "Malware payload", "value": "14608e020d2968f0c7beec6939c1955ead78024f201aac430f994f1998f030ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "2e296852-b38e-42d2-930b-cd2660e45404", "value": "T1CE334A07B96280FDC5ADC17847BAB639CD3374BE027976AA33D4FA3A6D49D211E5D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "18d8279c-38f3-48b2-8ca0-daf88433fa96", "value": "768:nHHqmdDSodln8muwp4roeuZ7YvK3VfoRYjGbWnaWUohyye43egkE6I2jvk:HKmdDSodl8mxnZsvIfurWnaEyyOr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848128, "uuid": "8792e4f6-02c3-49d4-9405-e4b8c9aff622", "value": 51264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "954ffcda-a5ef-4cb1-a15b-865b4418083f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848128, "uuid": "74658edf-e5f5-4691-8770-8a405f43ec76", "value": "t1372135b57a542894f0ebf4627396d1294e382d3410d077ead5f0b8eaeb21b808971c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d64058f8-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848192, "uuid": "c22492d0-a7fc-4185-91ad-b051524351e0", "comment": "Malware payload", "value": "18eb9a460860848bc1046269cbaed3ee", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848192, "uuid": "e4b7bc24-3102-4ec1-beee-9f15f5410a19", "comment": "Malware payload", "value": "31bd0d42a5ce291610bed7ef3f21f9d4269c44821b6295139831210758a377f7", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848192, "uuid": "a3d076f0-96ef-4f75-999e-2c6ddf4faaa0", "value": "T154F05EFB50D7695BC898DE4A324248893051E38A2066DB49FC8F1079ACF4B28F029E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848192, "uuid": "93220ed0-eee8-45c2-aa13-d470c8a8a88f", "value": "12:9uFLAtz3pKNIMekYtzvWoatzQWcbKMYtzfU1tJZ8TpW1to:oFLAlpKNIvkYgoaSrKta1XCTpW16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848192, "uuid": "e8d1ec13-4b3c-473d-bc9d-4f65b87c73c1", "value": 489, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848192, "uuid": "7e0823d2-30b5-424b-8b83-249a38df8676", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1509ef9-776a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848613, "uuid": "84521235-d1df-442b-b7c1-dd797b57436b", "comment": "Malware payload", "value": "174e5e8c6169ca4efc3d6d86b1baedf7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848613, "uuid": "5a6aa757-b7db-4a63-b969-176a4729f219", "comment": "Malware payload", "value": "dc16ac75caab67c4d71ad19f07250820173bcf9047c1a258c327b9e3906a093a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848613, "uuid": "eaaa3dd5-124b-4880-be09-d81754163546", "value": "T179362997B8824983C4E43676B87E81C433675EBA9B9753676D04FE3C3ABE1990E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848613, "uuid": "71e88505-6a44-4d7f-9650-4e9caca0c297", "value": "24576:1EnmaMMbOKaUcWGpZYx92yhLYM/00OPU3YoCt4aK601At1XJbOwz28Z3c0b5Z2Rx:1ifg2SRYOq4rIxttyk9pa+A23", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848613, "uuid": "8c003937-a53f-47e3-9783-0337cbad43be", "value": 4915200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848613, "uuid": "5f784cb4-54aa-4aa2-8205-ea73c4acccac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848613, "uuid": "276f591b-20c7-49d5-a3e5-a0e2027771e3", "value": "t1e4d0c916af5c6bcc43d8940d79080a049af939f61270ad146fceedbf0d26d8238e60", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d093383-18dc-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848613, "uuid": "4dda9ad9-eecd-476e-a0f7-2832597946ba", "comment": "Malware payload", "value": "696a6a067718322e6b3ea7383634e8ed", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dvr", "colour": "#2fdef6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fast-reverse-proxy", "colour": "#27bb17", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848613, "uuid": "ea601539-4769-489f-9cf6-289fc93c2dbe", "comment": "Malware payload", "value": "32ecc151a2705996c7b537a48bc9b762ae281712f6f4a55a835f086406e7d3dc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dvr", "colour": "#2fdef6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fast-reverse-proxy", "colour": "#27bb17", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848613, "uuid": "0b33a4e0-ba5b-4992-89e9-84dc53980e09", "value": "T1196633E840662F8F561BA5F82FCB95863FB700C05DEFBF9546994A3701C5E13B9788", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848613, "uuid": "83ee1b2f-9832-4db3-b75a-0000a1d8386d", "value": "196608:rFvdTt47T5sGTWu0Xk9m0olyESDPvAMbX+CKtUWZL7xYNMFa:rFvUX5rTWsuyEyA2utUWU6Fa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848613, "uuid": "bc5905d5-3bcc-4e71-80e4-54aecaa3b0fd", "value": 7067481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848613, "uuid": "74fd8ff2-0ad5-41a9-bc51-c0ffdbf753d0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cb3b47a-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848614, "uuid": "92137719-f79d-40a4-ba92-a3e7fe2ec3ac", "comment": "Malware payload", "value": "fe9ffbf4e3d88a6e640d26f137ec5d27", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fast-reverse-proxy", "colour": "#27bb17", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848614, "uuid": "2239d67b-48eb-4a74-8c29-1bdbbdb88dc9", "comment": "Malware payload", "value": "ea1c3a2691aba5b747e3461898d7aa0da3d58547910e585766fbdac3b969d45b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fast-reverse-proxy", "colour": "#27bb17", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848614, "uuid": "ad01035a-947f-40ea-8195-e700ab3eb50a", "value": "T12DD63B97B5924A43C4E4367AB8BD81C433A30EF99B8656666D04FD383FBE1D90E397", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848614, "uuid": "c140b784-a841-443b-9b71-e375b8e2281b", "value": "49152:foOA6yps2Vx4qoCtLE+51d/FgljGhVAsrqi7nmp97sVAqxRAV3jmspsLjE/ZjuoE:wOAlpxx4cRhxup7sWteE/VH0uF/Ev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848614, "uuid": "16df6647-5932-4177-a57c-da89c6c5f19f", "value": 13041664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848614, "uuid": "b6e844e3-9df7-440d-8683-458c709f9f01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848614, "uuid": "c1b6c5df-0623-4a10-b904-da02d85e7e24", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3e61857-776a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848671, "uuid": "b8b43558-de14-4fcf-b99a-0fe1063a4b6a", "comment": "Malware payload", "value": "da619b5a96f6598058bc8ce292d35475", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848671, "uuid": "2f079255-2125-479f-9673-f261045e2d20", "comment": "Malware payload", "value": "8be53b5a7a0ce74c9097990256525918a1012f41edffdefd46ca678925914b23", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848671, "uuid": "301f13a6-f1a2-476e-94f0-79d9df7441ab", "value": "T114472A8BB8924943C5E82636F8BD40C933B64EB99BD7656A5D00FD3C3BBE5D90A353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848671, "uuid": "15b922fa-abf8-4f4f-aca6-2a71254c34f6", "value": "98304:N8garf8bdmot2SSgHzAHBkVLI+ik5sazeuU+RWuckXoT/q2MdIgc8uuMAK:N8/jSSgHkNHJnGWNjq2MzeuMAK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848671, "uuid": "18004d6b-81ea-4fd1-b179-4239d9f024b7", "value": 26345624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848671, "uuid": "939a61f7-482f-4dde-922e-766318eb4c32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848671, "uuid": "79dd19ed-1c5b-46bb-b545-76f4d82910dc", "value": "t16fe0d8569b0f474d23e4e084470aaa7816ed306807e07dbcde64d7cf5a93085f32d4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3830bbe7-776b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726848785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848785, "uuid": "f4c2ab01-291e-450d-87a1-0df2e2184010", "comment": "Malware payload", "value": "23f9ecfd599fd7c0ca4c14ef9d27dcfc", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848785, "uuid": "d1330a92-8e8a-44c7-a24b-6353ebc01d76", "comment": "Malware payload", "value": "849e3c9b3407003f1e65413b8f7d88d91f45900936555e2993b0255c0004626b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848785, "uuid": "1cb14fde-9d42-4bae-a647-3b476a6ebc20", "value": "T1537518577C914946C8D53A77BCBE81C473629EBD9B8A621B6D04FE3C3ABE1C90A347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848785, "uuid": "99111efa-be3a-45a1-a1b3-0fdaa36335ab", "value": "24576:SnwTZEhceE9wvrhfDTjcyAAASBzr+cQxKrZd+u9joa0kOLAaLc+8VKi2FXwTTpFB:ci4WMbQbcrB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726848785, "uuid": "4bb9e76b-4de8-49c7-90eb-e03941afbe00", "value": 1638552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848785, "uuid": "1eefe651-0786-4673-be96-31d4f6c703ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848785, "uuid": "bde993b4-4b11-4082-bd10-d98859cda220", "value": "t10ae068a38d1c6fcc07e0c4d88609110584e432a8e738a728edbb0f6e1e53484b2e98", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb436ebd-776b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726849086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849086, "uuid": "27f0e230-16f9-466c-8f9c-63b2d5c5ad2e", "comment": "Malware payload", "value": "42924131895c18395ecebb6e49f10b5f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849086, "uuid": "983411d9-debb-4f47-a18d-09c5a6ecfe79", "comment": "Malware payload", "value": "72b1c8d702a136aba2c60a9da4cf3df39282ee3e30f710a3d59e2277d4e7c0c5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849086, "uuid": "2f2d0fa4-23d0-49a6-8355-3a5d7b12e308", "value": "T104947D42E2A17C50ED225A778E3EC7E9BE1DF5A0DE55BBAA3104A91F24F01B1D133B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849086, "uuid": "0bbe0c52-3844-4173-9fe0-1a225df7fb64", "value": "8c0cab8cc8c7ffc1847966839490b297", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849086, "uuid": "07fe2729-82a8-4036-8419-b64d9e0996ba", "value": "6144:EApiSVLzLdk9V4uVaMduxVHlAQLYmJhQoIkuPFg:ySVzdk9NAMd6jqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726849086, "uuid": "b2c58fae-1068-4cb2-b1ad-719a7a313b87", "value": 420864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849086, "uuid": "3365fef7-543b-4cb2-ada2-dd09b8c5e142", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82e9aafc-776d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726849770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849770, "uuid": "ad400f8a-b072-4eb7-b15b-8923a47d45de", "comment": "Malware payload", "value": "49daf74de84a871269cf565e6e18cf31", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849770, "uuid": "266fd1d9-262e-4f4d-a0eb-259fdddb623d", "comment": "Malware payload", "value": "a814ecd117f79ce32bacab48e63e08ac0922c95e7fb28cb7b63e3b5bd02801ea", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849770, "uuid": "5b0c65d8-a87f-48fa-b991-8e0b337bd6b2", "value": "T174235CC0A553D9F8EC1205B13077DBB39BBAF07A209DEE97D3D5E532A802651D2072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849770, "uuid": "e739cb20-7a6f-401d-bca2-db4793a8947c", "value": "768:L8/g1BplBIGK8nCKSADwph6qPJVMLUEXNBI4xqbJwDCp5hs+:A/AplBIGK8CjADwpJML3xmJwDCPhs+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726849770, "uuid": "a6051aed-a12e-4505-896b-c8745f9abfd4", "value": 45656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849770, "uuid": "1cbe76ae-2d5e-4cdc-870f-85a6026021dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849770, "uuid": "469bc304-5611-4c95-aa3f-59f3114e0ec6", "value": "t157110abb1e7618f8b3c02904c36fa2f14575c66316b039e905b32dc472e5de190a9c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a997a52-776e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726849997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849997, "uuid": "bef5a145-b712-4f90-b71e-c77a414335b7", "comment": "Malware payload", "value": "a3711c6dbac4e88ef5d0c8c23527e09c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849997, "uuid": "2d2817f6-90e9-4544-bbdf-f57bb276950e", "comment": "Malware payload", "value": "a16c32a05f53137517b4905b4b464f35acdf13e406d9497000de05ba79f61f4b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849997, "uuid": "70300852-e052-4fc1-913e-7ec83469f244", "value": "T197947E42E2A17D04ED625B369E3EC7E93E1DF9A1CD18F7A93214AA1F24F01B1D172B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849997, "uuid": "589fcb2e-c865-415e-852f-526b5ef52954", "value": "8c0cab8cc8c7ffc1847966839490b297", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849997, "uuid": "0c231a07-e8f4-4b92-9c07-746ee6a52515", "value": "6144:7ApVS87zzjmhJ8RJY2vUEroX5/Nr5MlQyzO1RcSUV/Vh5qrzKkuPFg:US8bjC7FEer6S1CV9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726849997, "uuid": "fe58e06c-a469-485d-969b-bc367356f98c", "value": 418816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849997, "uuid": "f5067df2-dad4-4e19-82f5-b98edf48577c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99d2875a-776e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726850238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850238, "uuid": "1528e737-bb35-41f4-9dd7-bc4ccd77f0cd", "comment": "Malware payload", "value": "ec4c23b36045251af03c9888dbccbe82", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850238, "uuid": "d614ed3c-f0bd-4b3c-89bf-6cf8181fbf7c", "comment": "Malware payload", "value": "1f6e0ebe7e1cdea391d6d5f1cedf9cfc9932a27b24dd6d4d6115a7b8538bc2e0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850238, "uuid": "97ddccb4-fc9c-48a1-9700-be25a2d123ce", "value": "T12A946E42D2E17C44EE225A76CE3EC7E93E1DF5A0CD59B7A92214EB1F24F02B1D162B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850238, "uuid": "c6a8e5c8-a617-4d82-a4bc-72017df8f4d0", "value": "8c0cab8cc8c7ffc1847966839490b297", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850238, "uuid": "8368a0c5-4236-4ef5-b618-b7f024391c1e", "value": "6144:TApySRLzq7fpaE7vGeEXhG28pAx0/buoZKzkuPFg:zSRi7fwGGZX9CAe/buoiV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726850238, "uuid": "c387aa09-e912-49f6-9a94-33af8ee3e055", "value": 420352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850238, "uuid": "15490230-1506-4e0e-9550-18dd26889e95", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a09a8bfc-776f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726850679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850679, "uuid": "8742c2ed-ccd2-4467-8473-f3560e517523", "comment": "Malware payload", "value": "364d82d47c4e7b9e7fdf0ba2a7d14cfa", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850679, "uuid": "b987dfb3-b0a2-41cd-b716-7e4231f8f0c0", "comment": "Malware payload", "value": "1f2c18bc1380c52f24999bded89a756d7bec64702ad0f7632d8eaf16be0eace4", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850679, "uuid": "80de35d2-7a0d-4dd2-a2e4-82d0d4aa2647", "value": "T1EA24DF9A3D5B5F5BE2B401243EBA42BD0814E863E69234415C227F953E1425BDF3FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850679, "uuid": "4b0b74e7-4170-41ac-a60f-7dcb2fc1821b", "value": "6144:AdRMgP2JwCB9H5Q9RU7vS8bbO8KAOC31e:+RMgP2/Q9RU768bbO8KjC31e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726850679, "uuid": "ed4a1a52-5c1a-4344-90c0-2e15ff00be0f", "value": 213090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850679, "uuid": "70ce4f9f-e98f-4d2b-b18a-fcff64e17a6d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90178fff-7770-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851080, "uuid": "bd0bc31e-ea13-4ede-a2d2-17925856a822", "comment": "Malware payload", "value": "0a53ce895eaa479a76b818bb445b9610", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851080, "uuid": "9f1d0748-262f-4335-8190-735a0586e05e", "comment": "Malware payload", "value": "1d66c2eb65fdc61e8c177f927ad6ce9ea8580f605d38c6ef2f6ac516762019b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851080, "uuid": "6a506993-4bac-42b4-901f-bfa4ecaf3010", "value": "T14982B48BF7508A7FC48C8374449B423526B3B4B1BB1393273708A6795D437D85F2EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851080, "uuid": "4f6344d2-cac0-470c-bda2-e0c3486796ef", "value": "192:RnxzjwsWskaDanX6JENuZYhz0h+fcfLBj44rXOgdFNeGJkr9l1ZbhAGPpglS:BWskamFsqGhR9jhXOgdFN7s9l19CG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851080, "uuid": "cdd31301-4d71-43c6-9596-7e6d7e740bf0", "value": 19015, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851080, "uuid": "3d612df9-4de6-4f04-8102-899aede08074", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851080, "uuid": "4d971cf4-fa10-4533-b462-31327ed0286f", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8d45370-7770-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851176, "uuid": "da445451-4654-4d28-b0cb-8ed5277031cf", "comment": "Malware payload", "value": "ff9385f9988f8e420f36c4b215683529", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851176, "uuid": "7731dc80-83a9-4d5a-b3f4-dfcf88de68b0", "comment": "Malware payload", "value": "29a4f2d67a91f3c026156474e0fbe7ec41e24abfab4c99270bc2f711e2001ed2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851176, "uuid": "d938c1f2-ff53-40d6-a354-e8fd66705bdd", "value": "T1C6947E42D2E17C64FD229B358E3EC7E93F1DB5A1CE59B7A92214A91F24F01B1D1A3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851176, "uuid": "ada56ed6-2c46-4abe-93fb-eec3b2b182a2", "value": "8c0cab8cc8c7ffc1847966839490b297", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851176, "uuid": "820d1c2d-b485-4274-9ff6-fbfe1b5e30a1", "value": "6144:DApnSx7ziyeOklmZ40NAql/JmRDuGGokP+OlNTMCDegWjdTHEgkuPFg:CSx6yBrFAqL0u1okmi5legWhYgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851176, "uuid": "9e667a45-9aab-412a-a5ea-614534c4db26", "value": 420352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851176, "uuid": "ab0badeb-cf00-4715-8145-7f655892c6dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ebd9b68-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "3b37ea2b-8e4f-4ef3-b777-cd83acbcd480", "comment": "Malware payload", "value": "afe02efee28e69a0b45c1f2b94afda49", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "b93c5fcc-5209-462a-9e2e-00edc175326e", "comment": "Malware payload", "value": "d3be2460cbe3068345e26dc6e4237f2b9cd2f9ccb9b637ffb5145b39f9cc41f4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "86de2446-8ddf-4eaa-8dd9-6b4dc47160dd", "value": "T18E335B32BD7A2E17C4D4B9BA12F38324B3F1561E25A8C62E7D720E4EFF14A4065476", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "8fb41f56-f4aa-4ab1-90fd-0079baf2e94f", "value": "768:EuovxHu7iq9kmywHFUH6ENwhDA4GeLyE/VO0O+GkDT/:EuCHu7iSkmywHFUleU4Uuv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851964, "uuid": "c6e18058-c901-4886-93ab-8ecfe0bb0b37", "value": 52852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "31f6d984-ddb0-456d-ad0f-c046334551a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ed7c493-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "94a48adf-5e20-499e-b795-db013f9ab40e", "comment": "Malware payload", "value": "8d5347b95748539d277788ed82904f90", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "bd95d6fb-4bf9-4723-8de2-58cfc82ca9c3", "comment": "Malware payload", "value": "f11fa50c2530258b76fab0ecae2642b79d2648cabe28b2744bc6c217409f6706", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "bc037be8-b58a-485c-9c0d-22a8e5663607", "value": "T11F3329DAB401AD7CF84FEABE80170A0AF671335151931B2763B7FD936C321A49E16D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "8b1a6890-9ec8-4164-ad28-0ec3a5436b60", "value": "1536:UIwdI5Kxoj2QB2wOXp1F03gYVXZsgXfQJOpz83c:UI15xB5VdUJM6c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851964, "uuid": "c37ae3a4-56ac-44ea-b493-4caa2ae1514b", "value": 50292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "eefa8318-3dda-45d7-8cd6-6bde7da18c29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ee9b946-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "580c75b8-d7da-4f31-ae47-58b4c890891e", "comment": "Malware payload", "value": "bf12898fa16d45a58af6f0d498fde67a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "69eac8a7-b0f9-4782-9cee-853e1e1e9c32", "comment": "Malware payload", "value": "2b5017f9e422251531e963f725f95443cd365b91c7600ccebc2769a8cbb2ecc6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "b094e809-b6cf-42af-b1ab-9ce928acd2b9", "value": "T140233B42722C0A47D1A25AF0353F0BE093FFED5124F4B5846A5F9A4A8636F771186F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "c5f60747-ca5a-4704-8ea6-faade12f40cf", "value": "768:LDS8QWt/1/q6sFTRoRaEC3fBdIS0ftsS1wtVK/tmIFr91Cqh:nft/1/qPJCSPbaIKrjCqh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851964, "uuid": "4e5aa7ca-913f-4e11-9f91-3698e6538126", "value": 47772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "597f0023-e55c-49aa-bdf7-f17dd2a9a416", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ee9dd8b-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "e0ed0bfe-d6b1-4320-b6e5-9ff56e760714", "comment": "Malware payload", "value": "c59703958e3a1c2eba6ce296bba1827b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "1dcf650c-08a1-4c3f-92ad-a19277706de4", "comment": "Malware payload", "value": "ccf6c2f261f79c3428ef6a4a355a7df00aebce715e846aa8db82e6a8576e7d3c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "0af128b5-47a7-48fa-95f6-1c732b8b4c9b", "value": "T1E9236DA2C45EED94C1489678AA688F781B63F40487A76FF54B4985B24083FBCF60D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "ba1902e2-186f-42c0-b02d-f457703a1bec", "value": "768:lau8Rwtqa4dvGevHeceSwS9Skv0/G/qXCPYob1pC0:laJRwt7UA4v0u/qXAJpC0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851964, "uuid": "9bbfca39-6cc3-4d66-80de-3a46603a5805", "value": 45888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851964, "uuid": "1959ab6c-1794-4e18-b7a0-7177743e9218", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f33e2b9-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "8557503b-ccd6-4e62-ab2b-7d6925179efa", "comment": "Malware payload", "value": "314612dac7db3afe86a298121b505122", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "e01197c6-004e-4b5a-bcb6-42c8eb7276c3", "comment": "Malware payload", "value": "57b203a948b359a988a6e87f874b57ff03dc4d9d849a22af21f540883f2c1f53", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "469f8d67-3a91-4c26-a865-ccceed01d18f", "value": "T104332991B8D29A12C5D4137BFA6E01CD332663A8D2DF33079D266F1177CA82F0EA76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "296be575-0984-4db2-a92e-40c863624c5d", "value": "768:wbm8jSp5Dcy9GKoTO2P5KKNQF1d7PNcHsKV3fmzguHOMarnEP9G/hh43pP/UXN9O:wTjoDl9GBePNeCOM4E9G5e6xXU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851965, "uuid": "169c024f-0800-4150-96fb-4a94ba91e5e1", "value": 50780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "0ebb1728-726d-4aef-869d-a3887af69b15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "41263d4e-dfc4-4864-ae2d-b3ee9ea7fc54", "value": "t18e11ef220f0d0acc73f5606d828fa21dced835f929085b84af5d75594643ed16e511", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f42c270-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "7d8cd172-c52e-42ce-975f-a07eb5f0d4f2", "comment": "Malware payload", "value": "8e194329e1d8bbac5ee60737c43fdbe0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "3704eacd-87d9-4897-ae9e-4c0b00fb226d", "comment": "Malware payload", "value": "17cba8a055d30cb845d0dc6ca31a236a551c790757b2f5ce66e6e4873ef2c828", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "bd15fd98-459c-48c0-be7e-ef9d1f65580d", "value": "T1F663A54ABF610EB7E8ABCC3745E91B0525CC561B21B92F39B934D828F14B25F1AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "3c19ae09-7aec-4e94-a868-62b0d7473d79", "value": "768:Oh9F8O0QnPBKujtZmITE8qI9TtlQmYEEEiNq57yekepEeV4Xjv6BVkXir1/AXis:i9F8O0SP3ZmII2QmqqctkEi4X+B+X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851965, "uuid": "28fc90ea-5c48-4677-8c93-acecb8e267d9", "value": 67928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "69852f79-2e27-4d72-9535-7f733fa2c046", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f55b070-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "60789edd-b8a7-4e42-afb4-8224b5bf6848", "comment": "Malware payload", "value": "3c4508328efaf6b90c95cd62dc3a8d54", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "844fda0a-9e8c-4f2b-bcfa-204e8ad07aa0", "comment": "Malware payload", "value": "a3ecbfb0a8b3214b406263eff6cc1d00006d3243f5b31444616bb50cd121498c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "9fdf0876-cb7c-4f61-aafa-224978ec9e52", "value": "T13F53760E7E258FBCFBECC63457B78A25A648378A36E1C5C4D15CE6011E6024E741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "3b992efd-8db9-4924-a075-3f41c4065390", "value": "1536:zpSVfxditj35Wcwea2vRsG1UNOBHPKceVi:zpEfLiFweL91UcBHPleVi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851965, "uuid": "130cbf10-534d-4ec3-a71d-0b8ac9260a85", "value": 65304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "ebc0bc97-2747-432c-9e5d-3dda9a5166e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "eb89e973-73fc-4b3c-bb2e-ca964fc8a499", "value": "t10b01f618ce3422e5db721d9a2b6dfe36e5a130df06168d378e10fd9e9a6dd425e01c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f6275cc-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "19ca0280-082b-4d87-8490-1b672bd554fe", "comment": "Malware payload", "value": "ed8b8d838f3acdcb972f06e76b53f5ae", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "d084be78-59bb-4189-8e2f-89b7136a8379", "comment": "Malware payload", "value": "9123a91478003437ce7de6921c7aa2e39b76abcdb1b14e51fef692daba4096d6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "bf535063-5714-4978-83ad-0eb7a172a4b2", "value": "T10AC33B46EA818F13C0D6277ABAAF42453323E754D3DB730699286FB43F8675E0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "cdebcdc5-a115-4a28-be22-1f9e74c22e45", "value": "3072:S+fkKDtF6b0q2Cmj7VyL5UQJGxTC7XsBM/9Ts7FxB:/fkKDtF6477VyL5UQGQ7XWM/9IhxB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851965, "uuid": "d48371ba-0623-4c23-b36b-8e63d5a7e0c7", "value": 124411, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "6d337617-5f5c-4df1-b98b-23f0fcb8bd67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "0c1bc157-5594-49bb-9f85-da43ef302a04", "value": "t19721d0b14b2656245a25dfac89dd739a062c83155386ef33df21c8fcb40949de935c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f854a3d-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "abea0ec9-2ead-40f3-ad79-8940badaf7c6", "comment": "Malware payload", "value": "f350433126883e74fc309487a4c76637", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "6b7004c4-af18-4e8a-8485-52214d3b0ea2", "comment": "Malware payload", "value": "190bf07b46294ace0cf032a5ed2d99a383098debf0c11f850946ff32291eb26d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "11113da7-d733-498b-8adf-958626704760", "value": "T1E3131A56BCD25A2AC6E053BAFA5E418C331267E8D2DF3217CD252B10BBC551F0EA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "f5a27293-e1d1-498f-9056-7bf296a4aab7", "value": "768:ebVEzMaahmt6oTzyETDWBOGPiE4S7PK1LGaBfum/1J2jbdnEPY7/haM23hBDCXNp:mEmhzkzDmJPKBPJKbdEY75rs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851965, "uuid": "f40d3555-869b-467e-858a-b30aea155fcb", "value": 43492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "ed47d8ce-30a5-4ef3-9cbb-8e2579864223", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851965, "uuid": "209505a5-3995-4115-a220-8e1cb2261846", "value": "t107e02600bc759e2c98d7aa74dded07b496016223506a8b10cf11daf4c83f458e30ce", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a00b16fa-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726851966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "295162c3-6cd4-41e7-8e3a-680a79887d1c", "comment": "Malware payload", "value": "9d5f191f12b9587d5dfb737853bdf74b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "fd6760fb-ebbb-4468-865a-19b595c47a03", "comment": "Malware payload", "value": "681a8fa3e1b0181bb443b4fa1009b29e2235a051e1d3123f56186d2fe802c289", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851966, "uuid": "0a5bf6db-2644-4fa7-b23f-544a3fd44cb2", "value": "T113430846B8818A15C5D412BAFE2E01CD33176768E3DF73229D106F247B8B92F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851966, "uuid": "a17f13e7-1553-44a0-9766-cfb5554a58e7", "value": "1536:1dnQ17yVyx72F544IeqywKoqtN5mLNIpijuO6TQWw:07KylW5FIeiFqtO6TQWw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726851966, "uuid": "3e8999ea-dc57-4e62-974a-ca6149b7bc9c", "value": 60224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851966, "uuid": "8558f561-6677-4079-ac90-b3097758b597", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851966, "uuid": "571bd0d7-17b0-4c6d-aabe-a061bd3f8af3", "value": "t15901c0459e8c079c2be0c259857e631bc85031fc361635552fbe8f9e4a62e9230518", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6241dcf-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852084, "uuid": "39eed6fd-59b7-4d90-8f7d-499935c772c6", "comment": "Malware payload", "value": "173c14ffa14aeffd52b2644ffa45b742", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852084, "uuid": "efb7c6d7-1dfc-4504-a22f-bece96d51d12", "comment": "Malware payload", "value": "4abd1c7b0eaffda573620ae7fca04ae1b8a33fb66bf0e10b46678472a3484774", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852084, "uuid": "760c771d-6cf0-4cb7-aecc-9160730db03d", "value": "T1E641B1D5B29010FABCDA99A7F6AD469071C6558298E03E85D3ECBCF8CD8CF1922606", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852084, "uuid": "101e5df7-fd9b-4dad-a7e3-9f2d480b0353", "value": "24:yDGb54zR4zwGhR5rVrsBj5HC354du351V1sHj5+Xk5ST45xQB590j95mN9cD:TeT6WhODvGqs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852084, "uuid": "a5bd4267-d516-4ad3-a61f-77dd0a4d00ba", "value": 1999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852084, "uuid": "ef43d19e-6f59-4714-b8a8-9c5a7afe04fa", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6f8d369-7772-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852112, "uuid": "910e7cfe-5ad9-487f-9b61-ce11114b475e", "comment": "Malware payload", "value": "719ac0c3355b812988ac23768c5a5c57", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852112, "uuid": "83821ed1-92e3-4ff6-bd64-ed4afc335058", "comment": "Malware payload", "value": "9015895c6bdb89ec74aafd22d5f1c432bceb41d8cde8d16e6a3e1c46c3503fd5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852112, "uuid": "3a99b64c-dd34-4d3d-b696-e13afb39d016", "value": "T11D947E42D2A17C44FE225B758E3EC7E93E9DF5A0CD59B7A93104AA2F24F01B1D163B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852112, "uuid": "d66567a5-240a-41f8-8900-08507a6de4d7", "value": "8c0cab8cc8c7ffc1847966839490b297", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852112, "uuid": "a78628da-1821-4212-89fb-7c97f195ecf5", "value": "6144:JAp+Sh7z/rik9mmTNuWLCE2NocQvEop64rUGSm7K0M07CljM63tkTOakuPFg:5ShXriMr3LgOcBovr9K707C1EV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852112, "uuid": "851dc0d0-e67a-4ad8-a3ce-14b39731d59c", "value": 419328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852112, "uuid": "e27b8789-f67b-47c6-9992-47d940677a76", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "934ea975-6e5a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852870, "uuid": "58d07e16-c35b-4463-ae44-a82b015b1894", "comment": "Malware payload", "value": "040dc4cf0845934bb9e2fea239c9af04", "object_relation": "md5", "Tag": [ { "name": " opendir", "colour": "#6abad6", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852870, "uuid": "4d38549b-de58-4832-9a7b-4a5babf6ad7e", "comment": "Malware payload", "value": "c14e71b86173f5fa0f4b487931f8b6651ff8ffc1dd3a7f0908d17adfbee7169e", "object_relation": "sha256", "Tag": [ { "name": " opendir", "colour": "#6abad6", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852870, "uuid": "60a4482b-771f-4246-b4af-dc718bba7ccf", "value": "T1F3D533743BE3E5A9901D9C8BF120951AA8457FC96491C66DDB0F40FB80E9ABF83370", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852870, "uuid": "d9e3a661-aae4-483b-a01c-5363c7b79df4", "value": "49152:x9D3K0lOCxN/84swrTi7CA5Bg7jc0DpALpcE48q95VSJ1HEfGzjy3dxsYywtdOiv:nDa+OCxqErB0q7jNOp74JBSJ1TyteYys", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852870, "uuid": "a3487b9e-af94-4319-9d09-7c3cf79340c0", "value": 2988198, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852870, "uuid": "d3781ff7-46fa-47e8-b29c-1a8efa67a4ee", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18a3d0e0-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852889, "uuid": "42bba3f8-fe7e-488b-a0c7-8db707f3cc5b", "comment": "Malware payload", "value": "4f5c2a174af6d33d7ca89ceb8a53f3db", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "NanoMiner", "colour": "#c5325e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852889, "uuid": "651a4f81-3dbd-4289-b263-79fa7a0f0ba0", "comment": "Malware payload", "value": "63a2718ded8acb0679e30d6115c2414051cfb7378054672a2cd202b976dc2a30", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "NanoMiner", "colour": "#c5325e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852889, "uuid": "178c7d2f-2c6c-4b61-87d6-4936542afdf4", "value": "T1B247331E6134EBF9F6A86035C3C13B05E98665247DCAB450DB22679014B33FB9734E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852889, "uuid": "65d10313-c399-4965-96ec-9ec2e75e1cb1", "value": "393216:s2VDkpgb8z9BFSZSjGJFVWXfSAiTj+gyjTJnqY9mMiDsZgxE7tZrs6CwJj5:LVDoTUMW+S7egyBnqYpxZYfC5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852889, "uuid": "4982a283-feae-4050-a209-9c722437b794", "value": 26284898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852889, "uuid": "f44f8d49-6d45-4949-b3d0-bf0946f759d1", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e62904d-6e5a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852900, "uuid": "578a6861-54fc-4eb0-9a9d-1dc67c7ff2b8", "comment": "Malware payload", "value": "b0ddb6b2a2b1aa6118ec6940b27bde04", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852900, "uuid": "ed3ba2f5-9553-4049-8e36-fd4194770123", "comment": "Malware payload", "value": "7e6e508f7ffc277061c1588a318c66c999015991c866a6941924c1f0a34c58f5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852900, "uuid": "96900840-bccb-4108-93e8-49958190c096", "value": "T17647332DB139EBA9D7D5A130C7832F8AE5627834BCD9A897DF313B1014623C76311B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852900, "uuid": "3e9f9fe3-e1f5-4080-b494-211cdecef24f", "value": "393216:dR9tUNg9RwwwU+TkiUwjvd/kqrw5xY+tkGO3dskZugSDArSQUD0JwrEFVRZIcFd/:v3UNy3fm/9Hri/+LSkQgvHR6WJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852900, "uuid": "ae2ef751-0d15-46b6-8d1d-a5249863ea84", "value": 26130078, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852900, "uuid": "fab26cad-b6cc-4f8c-a659-9ab02414463e", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d180dca3-644f-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852984, "uuid": "93b60db5-b824-431b-8460-c9d2a5e88503", "comment": "Malware payload", "value": "07e19f32c7c66e8e98eeacb7f06e9117", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852984, "uuid": "99d2ce09-0324-457b-835a-6c0f04caca76", "comment": "Malware payload", "value": "1c14e5b1ff2be0f66dcecfa51ab1db3f5cec5959e16d8f919a9a9d5804c9c089", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "a4c900b9-c691-454c-b559-0503f4ad6999", "value": "T184623A5BFA219739D489D370489B803838B67494B703612BBF48A9362582B585A0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "59450b2c-a31c-426a-8925-1fc404d6ab80", "value": "192:RnxzjwsWskaDanX6JENuZYhz0h+fcfLBjLX5DfOgx8mZAvqV6cA61LNgvKKSihYc:BWskamFsqGhR9jLhwbw6cj1eivDQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852984, "uuid": "2e072915-9414-4f0a-bfc6-8de97a31068f", "value": 15599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "f087f0c4-d724-44f3-9800-1c8f967864f6", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "ca870af8-771b-4a81-9830-cfce56272520", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78693922-644c-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852984, "uuid": "929301a0-bc68-4534-b003-4efe9314246a", "comment": "Malware payload", "value": "0762baf23fd9da47efa2619b34b0c552", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852984, "uuid": "6a9210ee-102f-4ae2-b46c-bff63f1606c7", "comment": "Malware payload", "value": "2435928486ca968ac345ebd544d010d8e9e1b792db6801d0f65c14ecafdd153e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "ae4f87fa-6f98-4f19-963d-bfb4f49ba5e5", "value": "T1AA33F92EA5509B39C1C2E6349EEFA210153160B4FB32272F2A84517A6DD3F58477EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "5df7962a-a2d8-4458-96e9-06400f1752ee", "value": "768:AFTaLRRTAhgARXKF1+2OGeWum+2OGeWum+2OGJxZBpR5hJxZBpR5hJxZBpR5hJxK:GTqRRTAhgARX0K99G+y2/gOF2NhNm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852984, "uuid": "90e1be7a-2317-4148-a3e7-9748c84e9bf0", "value": 50575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "71d5d569-3bac-4ad0-8e8f-d5213325b42f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "0ee77c64-f4eb-4edf-93a7-3e80bb73e85b", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07c57857-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852986, "uuid": "5cd0e04f-cbf2-4997-82cf-d97206da77f0", "comment": "Malware payload", "value": "a11bdcac0a9a0ce332761d6fc18228c1", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852986, "uuid": "d481b501-f5f9-4060-9cb9-a7a39b98aae5", "comment": "Malware payload", "value": "456390dbd27ccb743a52d7d725a45ee476f8166f2a21b8bc333e96dd276eff64", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852986, "uuid": "5150ab2c-59ea-4ace-b004-d5699396694f", "value": "T1C874239F381856F7FA2B4242B9F998A927FF11457B6C46F4C03201E62E962386DD74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852986, "uuid": "be0a34d8-66c8-46ef-86bb-ee6fdc3332d2", "value": "6144:wvAdv5EI7Q1EywCaT/SI4YF1Gkvb8JCaSkx62Zu8XnLWbRSu5FC4aVHE2E:wvAV5X7Q1vwwDYF0kvIJfL/xnLCSu5FR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852986, "uuid": "1216622d-1471-4868-91a3-641fc12ec72e", "value": 346793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852986, "uuid": "d2abfe58-8207-4e5d-a60b-b6aef8493217", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e50e6717-7463-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852986, "uuid": "4575c560-4728-4107-bfc9-59af889b13da", "comment": "Malware payload", "value": "7f8ec407d5d182333cbea7f19f9b4023", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852986, "uuid": "08023da9-01f8-4404-9723-bca89f6a2971", "comment": "Malware payload", "value": "7a7a342afaccaf81565a501c0ea928a1c17e4121763e5bb28183e9e264e81198", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852986, "uuid": "1f52345a-7a33-4716-9bf2-5b63217c7b1e", "value": "T1DCD43A1BF0A7A0ECC4AAC1350FAFA637B932B85D42347F676454EB311B65E60672DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852986, "uuid": "3a71c86d-df14-45d3-be13-abd0dd4adb99", "value": "12288:6lKcanCfM1BUKxwrO19A9ThsitG9z+VJ/0R+QQVABhy/xJfhX33DT8sDQOQnLYM/:6kt5xwrO1q1sitGx+VJMRlQ84pX33DT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852986, "uuid": "a007d709-a49b-40bd-a26b-39eb708bcb0d", "value": 633648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852986, "uuid": "16bc341a-f9b8-4c3f-b491-d75538e1f73a", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852986, "uuid": "b010745e-156c-4727-9b6f-5110d69970fe", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a66808bc-644e-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726852994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852994, "uuid": "135e4490-710e-4c2e-ab7e-d9c76f4cb7d0", "comment": "Malware payload", "value": "19f6ffe88d96024f2d751565cb72b0f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852994, "uuid": "aff504a4-d839-448b-b5c3-392db40d466a", "comment": "Malware payload", "value": "96273e46a800bb8a08195365f8b249215834c07fdce90c0f2571ef8b569ed488", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852994, "uuid": "6e81e462-d9b3-448b-815c-c1ccfd51e1fa", "value": "T19F369E6BB6F694BDC197C13847ABC2727A31B4A803216D7B3584C5303E66E641F1EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852994, "uuid": "91eb5eba-60c1-4cbe-a2d1-b2ace2c49209", "value": "98304:a544Y9+TUG0joFB4TJdVpzGiaAC1TfLhxiv:L9pEFBYdbGACNE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726852994, "uuid": "7aaa78cd-10ba-4349-a85e-78ec704fc4fe", "value": 5062183, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852994, "uuid": "2ff7f45c-dc4d-4be0-bd0e-d239c9f270bd", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852994, "uuid": "0e625783-0a1b-4769-9f12-6d02c8c1fa0e", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a0500d6-644e-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853005, "uuid": "9502d83d-1467-4b7e-abae-3e450aad962d", "comment": "Malware payload", "value": "a84dad3d628f1ac6310de31f9595e6c6", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853005, "uuid": "202185b9-6004-4789-b9ba-37a79d7e90c7", "comment": "Malware payload", "value": "a733d96ca9df1994830f42f7914f6ef45f31788754ff3e47c68106c58fc0e46c", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853005, "uuid": "702cb82e-6055-40bf-b1dc-b53f3fb76bdc", "value": "T1DD6633CE6A3363A0E61D39CAC2840740DE2C186AEFB9E5127F6BEC171C16746F52B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853005, "uuid": "851dcc36-3325-4b89-8c9a-104f954363ec", "value": "196608:ZooDGkG7WZwbUEOBLydQFS8vG6tfZGN5HL+qy/RgMaeUq:ZooDGkG7WZuULFSSWr+dUq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853005, "uuid": "3e94a5da-7514-463f-91b2-efe6a18f7c83", "value": 6771646, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853005, "uuid": "8be407d9-d12e-4241-b55d-b443fc1fc085", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adb10193-644f-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853045, "uuid": "93630d5a-7ce6-4210-bb7f-a9564399b68f", "comment": "Malware payload", "value": "bdc9049b6651cf2f07b4948b37201e7e", "object_relation": "md5", "Tag": [ { "name": "bruteforce", "colour": "#de303d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853045, "uuid": "ec0e8d87-7b0a-419c-8b01-4d7f7737c2c1", "comment": "Malware payload", "value": "5b140d70379e8107a3482a3bda6cb1c93efe13161761d4b63333cadd866b2553", "object_relation": "sha256", "Tag": [ { "name": "bruteforce", "colour": "#de303d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853045, "uuid": "bf10df70-c045-4da7-a9cf-e380d5156cec", "value": "T1A911218E37DB3CF8860AC6FEC30692573C22B3870353F529DB48C1DF8104A4AB6406", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853045, "uuid": "b548c4c3-95a6-40d4-94c8-f7801d65880d", "value": "24:HE5hBbK78h5AVRra6yEJMGrl6QgE7oc7Az8QcbCpdb6p:HabK78kVk0gD4Cpde", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853045, "uuid": "4b915bc3-23c4-49ac-8923-5e93a4170afb", "value": 971, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853045, "uuid": "6553c42d-208a-4302-bfff-99152d29318f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08fdfeb1-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "19fedad0-5622-43b2-a2b5-7b5703a3c050", "comment": "Malware payload", "value": "d0b849cd19813c9ab50e21ef4571ef56", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "badaa2ad-7a6b-4698-9844-a201dc90a490", "comment": "Malware payload", "value": "26cc4d4d6fae20cb0e62550e2e04d45cedef40cc7d15a829fe83964c19e045de", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "c3d37a73-c11b-44be-8e47-620dc9aa3629", "value": "T1F4C10AA5FD24A8603B5E4C3E70AE56296EC33D3F9E3B3804752FE860672D04CA3586", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "999c0714-3759-4a9c-97d2-73effef3168d", "value": "96:YxzD+tQ4RP/dhdOBH23aTU5UUZQj+pKrHphGVp23acGVJ23av:Y9D+TP1hdOBH23aTMZQjhrnGVp23acGT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853165, "uuid": "d6ce9bbe-e41d-4c8b-8433-fdf6b3baa1c3", "value": 5915, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "c7854d39-8e19-4100-b4b5-f45f81c0b14d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c7fd1d8-644c-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "6b4042eb-6ecb-426f-a269-3d9ad8833ac5", "comment": "Malware payload", "value": "ecedbc01c09a0c731d2cd4c58074d7f7", "object_relation": "md5", "Tag": [ { "name": "CVE-2016-5195", "colour": "#D8D4DD", "exportable": true, "hide_tag": false }, { "name": "DirtyCow", "colour": "#E3CBBF", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "15651042-f697-4548-bfc6-f4bf931adeed", "comment": "Malware payload", "value": "c433453f93bb28661d0befecfb472cf5a43c6a4be80e7357781a0c1c6c0590da", "object_relation": "sha256", "Tag": [ { "name": "CVE-2016-5195", "colour": "#D8D4DD", "exportable": true, "hide_tag": false }, { "name": "DirtyCow", "colour": "#E3CBBF", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "fb2fac20-915c-4332-ba62-bc54407b5efd", "value": "T1DB6423918DC3889D00A04FC0D9CBC59C3FF839920A8A5E9379F45F45E5FA6D836E43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "b7e67179-4e9c-4dce-9b99-d10b8f7502b6", "value": "6144:CvVFjAOwdx9N48oQ7nM091c1TWVHKQeilTmvJbEwwcntwNKEJu86UQb83Aem:uPUO8xndC0VHQilivVEwwcntwtJunULs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853165, "uuid": "ae6a6d8a-fd0f-4e34-8c0c-7dd6394ad842", "value": 328918, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "b8dd93e5-c1f3-4183-ba70-5c84e11f7ad9", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0742d277-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "71ad5993-c15c-4404-a4b0-5add6025b022", "comment": "Malware payload", "value": "515c5322a01ff71cd2bc6b71f886c6e2", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "36f58c8f-b883-43dd-a53a-5dc8fbc70eda", "comment": "Malware payload", "value": "12fc85805f55b4944664730a5ba9cfe109471ad12d01dfbdbe2de8244e8b5cf6", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "3b785a47-f736-49a3-8ff4-eef132a29e30", "value": "T1C211C04E67EBF9B9F8C1F03047460A607099B0E762076A2857ECDD5AF898C2C52E1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "64bdc445-f683-4092-8c95-56f675548ad6", "value": "12:ne84iu3xearB02WBopUVZ2kuIwIvtfAVmi6gSzuSJtYiv1iJiQOnwuetdZxGo5DP:ne5jeYBK8UG69uV1SKQT1iYDe7fVWSAo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853165, "uuid": "36f8726f-a1a5-4ee7-8753-bec21eec756f", "value": 1072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "35619d3a-12e4-4f5c-9544-f4d769130dd0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08347191-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "085deae2-2243-476d-a5ad-d2f9f728c161", "comment": "Malware payload", "value": "57cab1be32aa02b90317b1555ce96164", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "3cda4697-6ab3-4f3b-a80f-2692b7f91035", "comment": "Malware payload", "value": "5829c6029d67cd266ece7ddb52c4fbd581f7ee469d71d7dc4948cedc2956ab23", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "a8a1faa7-57ac-4136-88bd-c68eceb4a89f", "value": "T19EF081A5566AF579FDC3F236B3D06538484654F60803553B26C1D40BAA69EAD90CCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "0c620f63-3689-4082-94bd-d75ae148cc46", "value": "12:x1UaAFQEAZAFdEnDbmeuAFpFAFkIwIwAF6VAFLlAVmEByeX:x1UagQbgdSvmxgrgB9wg6VgmVXByK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853165, "uuid": "6352878c-51cf-4dbd-b72f-f9e12bca6f02", "value": 634, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853165, "uuid": "a102cc08-7245-470d-934f-68adcb75a8ec", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07b7c55b-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853166, "uuid": "9f6500c5-279f-42ab-a689-f9d24d614f71", "comment": "Malware payload", "value": "7aaf8af5230dc3d85b324c1e50ab0585", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853166, "uuid": "4c543b89-e374-41eb-8166-9a7ab7247e52", "comment": "Malware payload", "value": "99618a7eb9660d493685a14d752f597e8fb303f12a6bbc9bb52c87f02e55f07a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853166, "uuid": "cf882413-e2de-4cf9-ada9-79f720f417e3", "value": "T11EE026CEC3C49CB8B48344632301C7C212C6F0125AD9FD882FB98D2130D17499686D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853166, "uuid": "68d873b9-1b12-48d1-b631-a6e4a6da4654", "value": "6:nnY184iu3xearB02gTBe8Jtkv+Rj+8p1fjodgKaWp1fjF0:ne84iu3xearB02WBbJtkv0j7ppj3tWpQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853166, "uuid": "a79f7e84-4784-4400-a381-fd3f895f12df", "value": 343, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853166, "uuid": "30942292-a4b8-4ddc-b7bc-a57b4e68fc31", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eea911ef-9031-11ed-9397-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853225, "uuid": "bbf4a8ef-07d9-43cb-a7a1-617f9da41226", "comment": "Malware payload", "value": "0b73cdccd97f65994412ab0d73d58079", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853225, "uuid": "e4999380-1c6e-421a-82a1-be727986bd5b", "comment": "Malware payload", "value": "3f37f1c383dcf32de86f91de1daef3d9a9d630b0ea5e9ee87367d87703426d63", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853225, "uuid": "3394ba2d-36e2-42ae-ba87-147ac52628b8", "value": "T17D23F1E1E9A601C2DE30C88EE5ED7191EC39D2B0AD94C59D4AD9D9042FD73C6502FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853225, "uuid": "a6682c43-9cca-4881-9cdb-eaddfd9f5909", "value": "768:qQBVtKcbGtUVbfZBuWcoImw52jdaQ9HFC+YxZMhWHL6RuSL4km047k:qQEKySAWcsh44lvYxeMzSLZm0d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853225, "uuid": "0052ac5c-0871-4bb7-bdeb-72b2179044bd", "value": 46332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853225, "uuid": "19a4e4d0-a240-4d97-b6b8-e9b3eb7c7e6c", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "952f16ae-644d-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853344, "uuid": "8fb8c157-ddf1-4031-8f86-43be16131556", "comment": "Malware payload", "value": "c728c589a1ae9defc491c8d61b41d649", "object_relation": "md5", "Tag": [ { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853344, "uuid": "7e2a1217-2839-4082-8217-fb2415239e77", "comment": "Malware payload", "value": "58dbe59f3c201218bc77c2757f4ba66334c8657464dc06ae61354460499722e5", "object_relation": "sha256", "Tag": [ { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853344, "uuid": "d8a1e8f5-dcd6-4c09-9759-0eeae66b108b", "value": "T1A5D2D75BB6609E39C0C5D3B049DFA1B0727374F4A722620F368AB3717541B889F1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853344, "uuid": "4d714c09-13c5-4931-be58-c54b88d07079", "value": "384:BWskamFsqGhR9jExKlNUSHNnczUIVA7QvOMy1+VEG48lMdrPFOoCNEVH/gxk1:AFTaLRREUrtHwdOW2gxY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853344, "uuid": "128de8d7-c189-4692-8bf1-2395c8aef3e4", "value": 30068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853344, "uuid": "50c28a6c-24ef-4ce0-b890-b72f14d8d086", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853344, "uuid": "8f4f59a6-29c9-45fe-9339-5bcda95e1869", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08f72892-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853408, "uuid": "d796d41e-3ded-4e43-a714-c0c2d303e47d", "comment": "Malware payload", "value": "ceef8c19594baeea9ee9b8d403ff758c", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853408, "uuid": "09ec8277-8b3a-4173-a097-a6e1c10d0342", "comment": "Malware payload", "value": "27fa66980fa184a95f9f7c40c874568f339db5229b8a98b2aa9a3202e0a403fc", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853408, "uuid": "e89081a1-dedb-4f55-9b54-d1ee14a77fc8", "value": "T1C2014630B50EB24CC5C2D952B951A111D10E175DB00D50F2F4D9FAC1474ABCA65259", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853408, "uuid": "dc5a80eb-5c86-4784-908d-7010ba377996", "value": "12:X58jCevqFWSVdrHwclAgcgW7OSqfccYsMEjRy3baBEfmohXcykUyp+tewp68Y6PM:XijR4N7wcl7cZyFTpo+BEfRXKp+qhiM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853408, "uuid": "38b688f4-4409-47c0-831a-ab50235f45d2", "value": 802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853408, "uuid": "f2da39cf-67d4-47de-8b02-ef319217b52f", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc3b0c5b-644f-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853504, "uuid": "55dcb3b2-8265-4e0f-91ac-45547dff12fe", "comment": "Malware payload", "value": "e76ec7d0f9a363c7acbc3f7337f65b70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853504, "uuid": "911afde8-3284-498b-b033-075835dbdcbe", "comment": "Malware payload", "value": "46e3ac57df591e63bca101be558d49f8a90ebfa0bd39ee516c143711bb74549b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853504, "uuid": "2821be51-cdc0-4697-b691-d72fa1845abd", "value": "T11A567D1AB1B355ADC08BC430825FC6636934F8A496317D7B37849A342EF6E241F6EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853504, "uuid": "bdf74e8f-5aa1-461a-bd73-32b2ec4aaa99", "value": "98304:YNBQ3P4XYLBixJQC0+4HdQ+2TIHP7u9ZjdTaEQCgL6AxX6hSZ:NT2Tr9gL6AR60Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853504, "uuid": "fb61cb73-aaca-4e2a-8f4c-38bcb812ea77", "value": 5937151, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853504, "uuid": "e2d1e6a2-ca0f-40f6-a2db-d79294cd9c57", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853504, "uuid": "8dc6b4c4-5535-4bcc-9dd2-d63e90dce37c", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e77d2b35-7464-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853735, "uuid": "3530cde4-a847-4e55-a263-6c9232d9584d", "comment": "Malware payload", "value": "ec400d6e3b0b03b0bcc4f3d7d8dfe7cb", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853735, "uuid": "32a25bfd-b0d0-4bd3-937f-8dffa1a4a32b", "comment": "Malware payload", "value": "91a86de01b0a646e6c56d84a070e7ebd4f7d19c81ec56250a3d2ecb94a8470a2", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853735, "uuid": "3f0a4e3c-a0ed-4ca2-8656-d42f54ef3566", "value": "T1DBF72316F5B2A0ACC1A5C978875FE5237E31B85C82306EBB5554AA311F72F308F2DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853735, "uuid": "416d6e20-4a43-4c25-bf2c-a27a14a149b1", "value": "1572864:P9vdT5+vS1e6yQIZzbYzGF5SghrbD+uz9uJ2zlM0yLq/qlmHt0rwBIPZf+umP:FFT5+K1er10zGLXbyU9uIBM0mqPlSc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853735, "uuid": "b7cbde7b-e899-4268-8269-502551823cc6", "value": 71385736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853735, "uuid": "1a0c1249-8105-461a-8ba8-6f791c5b5e50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853735, "uuid": "817f5881-c355-473a-84d5-0958fdbefb86", "value": "t1ce2111469e3c99fdb9e29c24cc2427e8410b8515a636eb11ff24c9d0a97e146f506d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c7a0ff-6873-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "bd2cb4e4-1859-4814-9c69-23685ffefd4f", "comment": "Malware payload", "value": "fd09350296d9116ed9083f138bf9481d", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "fc57de52-c9ce-4cd0-8770-a86dc23b0f19", "comment": "Malware payload", "value": "0a410139c43239babd76455cc7943fae0e19240096d862348bfa2a99ddb0539e", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "faac54ea-915c-4fb6-9c85-fef192ae929a", "value": "T163F37B72C8366F58C164E5B1B0318F781B53A62181871FBE5AB7C2795083DCDFA4A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "9c7d28e3-edbd-454d-909f-2d56d9306b17", "value": "3072:oXC8snojCDlwB0LnLEpNfaTF383SWJpPmQWZmn4:sjCvLnLEXNfJ8Lm4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853765, "uuid": "23fda4ae-4d92-4eba-843b-4bcfbe33affd", "value": 158528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "372f8b3c-9734-45db-9346-d882dc5d4677", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0664d54-7776-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726853765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "a2cb4872-ff35-4140-8f11-9c955a71a2ca", "comment": "Malware payload (Mirai)", "value": "6f7bec308ca4b61be802dd7ee573a4e3", "object_relation": "md5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "f655e442-9c9f-426c-b1b3-4092563d4786", "comment": "Malware payload (Mirai)", "value": "c672cd71fb5a0c336836ae8870a55d6ef5569a304733e3fdceaed2075de8ea5e", "object_relation": "sha256", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "86e7fc40-1a82-4bc9-a9ef-ac57558a19d6", "value": "T1A3F43307F3884FE8A425E53A1C8D71270D3E5F5161834E998B8B01955AE4CBF1D9CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "83965114-a9c9-4b09-aa77-9b23d16ee07c", "value": "12288:7eHnDzUbWouMbG7nSjampxoM8QSiNTUXqotRokZJ3lhq4xJpWLQG0eaiWClyYJTr:7SDzEWou+GruBow31UpOEhq4xv40NVCh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853765, "uuid": "be57b1a1-db59-4d83-bf62-933a233e8645", "value": 781116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "9b2e448e-ccd5-4f1d-b99a-cd21f0a2c9b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "31ba577e-fc11-43bb-b231-05625df69bbc", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d068e7d5-7776-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726853765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "a8a3e6ba-5727-434a-a993-eab254939e25", "comment": "Malware payload (Mirai)", "value": "330e12a3e25ffb09974fd85e9dae7e53", "object_relation": "md5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "9d47a5f8-49bb-44fe-97f0-d7312df8df10", "comment": "Malware payload (Mirai)", "value": "d46ac2fb5f73200e416bccae1ad34361c8bff535a75c2d19f66e5d96f721d408", "object_relation": "sha256", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "bace4577-191c-4d6a-83d0-39e1042dc1c8", "value": "T161F423A1C1DC6C3CE3AB81F97729157992FC26FB0A415D4091329605E6331DEFDD3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "90fb25bd-0a7f-433f-a89a-c2ee4dfd1f13", "value": "12288:p5ZZ8Lco+nNMIebUKXtdRjvpLxuKQCiJhxQxjsNWM+SEcPEPZ3cTv307:D8LcdNZebUK9/xLYKQCyhxBYMrY6v3I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853765, "uuid": "73ded058-01e0-4ad5-abc4-72e86244e5c9", "value": 730084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "24274a54-8789-47e7-bf18-5b63e0af6f8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "bea2eb1a-9768-43ff-8222-549efb996f26", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d069b519-7776-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726853765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "5f6a36c6-96b5-49dc-8f1e-5abf0e69e44f", "comment": "Malware payload (Mirai)", "value": "28d5b62d7c70a7b2e4041b3bc1a36398", "object_relation": "md5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "e297a0a6-8d5e-46d0-8ec5-4d9ccf54b06d", "comment": "Malware payload (Mirai)", "value": "440d6745e41ae010a09d41b3fbe25870f42d80ef94f9cb540ebd34fcefe4093c", "object_relation": "sha256", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "0be98b4f-9664-413b-a269-e7f0fa53a638", "value": "T156F433774AC03BF5F2601DE27A34019FB87D9126392F0BA24353368A8DDEFE6D94A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "d2555c64-d085-4fbd-b905-f25af1fd60ae", "value": "12288:UGud1jdQa3vpHZ/yNrmCIOR5Xz6FWCUZElPYU5qaPK6MLdeJ7966RiK1M:UNjdF3RZ/y1jb5uxEd6MbCM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853765, "uuid": "f726d076-0f35-4d23-8edc-44d0b04fc834", "value": 732288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "aee456d4-d3ac-44ca-aa34-70cfb8240770", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "84d486d0-e6ad-400d-82b5-6df27dfd30d2", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d06a7d27-7776-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726853765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "b6da239a-b652-4d49-980b-beb7767cd8a0", "comment": "Malware payload (Mirai)", "value": "406c02caf5c7a5fc09e474aeb6db0b66", "object_relation": "md5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "1ca06113-ee28-4376-88fa-9d6ecd22dafa", "comment": "Malware payload (Mirai)", "value": "8a305f5c74de46766ddb9a3aeb3a1dcd9fe04f3190f448472d4b202eb84a20b7", "object_relation": "sha256", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "a4ed6b2d-dd30-4106-a32b-c3219ca6c8fe", "value": "T1B4E4237F13BA9B9EC33AF5392BC30A97F3314FB01982BA9855E111F84A4185817157", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "af6e4c4d-8ef7-47ca-9dfe-579540f76661", "value": "12288:RHRyEuuqf2tc2CfNV2+x3MSK67sgSbRZy/jq0B2/iEIN1+qBZcTEU:RxyDuqf2tcnfNbVK6QgSK7BIc1rsd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853765, "uuid": "e25ee413-43bf-4e99-abed-89d165df5160", "value": 718644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "2bff10bd-8f69-4981-b010-b4b65eaceb83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d073685e-7776-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726853765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "4afc3487-8534-42ae-b673-34753c8332b8", "comment": "Malware payload (Mirai)", "value": "fd58b4a55838da8322a50420c62340d5", "object_relation": "md5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "c730c9d7-459e-4ea2-9696-377caa13778f", "comment": "Malware payload (Mirai)", "value": "4314bf91cd91580aae6b93058d84f6dcb79cf414970aae0438b4764bd761765b", "object_relation": "sha256", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "7873ccef-52b1-4bfe-af43-f928a9860974", "value": "T191F42397C90DF85082A4BCAAD9B673478BF912BFD9694550FB10D4207C6B239DAED3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "71cd6714-36f0-438b-bb0f-f24c13d30d15", "value": "12288:1/Sqn6nlHr8Anp1+acTyNky06MJqFlXcUK1Use/3KXBz0O1:Yq6lHbnrJY2zM2lXOsaeO1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853765, "uuid": "ee60aca9-25f9-4ce0-b319-83730df059d9", "value": 736900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "8a234bcb-58af-4887-b8e0-7e17ff558b3c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "ef26f76b-3f6b-42c7-9309-9ac2d8541939", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d08508cd-7776-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726853765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "f607c5d6-6b61-4ba7-b150-778f1707ecb4", "comment": "Malware payload (Mirai)", "value": "23e88e450a551deb3712d5d2f64df478", "object_relation": "md5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "61cc8394-7e6a-4dc7-86b9-0c4078fef973", "comment": "Malware payload (Mirai)", "value": "e5a59674395f74eb44421b429352d398201b9e297d7cd692e06230b9c1c343ad", "object_relation": "sha256", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "4628bbc1-6a90-4897-8f77-4022b4535a37", "value": "T1660533BA9312B43DD2E766BBCF5E4758C93026165AA0447C8E1212FDB844E36C7B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "65ec0daf-7076-42ad-8e03-71b18a02b1ca", "value": "24576:bKzyP1Y/P5m8f5qDhkBphPx3ykpk+mKvhPeoFcv:va/P0KEDUvPxHiJEhJcv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853765, "uuid": "cc2beeb7-c25f-4636-8740-b5a5b13cfb12", "value": 840028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "ba538891-2e2c-470a-869b-a88ada944ef6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853765, "uuid": "b05a2e0c-13e5-4cf2-ab4c-b7304413edc4", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9dd1e4-7776-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726853841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853841, "uuid": "099b99b9-ccf0-4a84-8398-b9fade8f77e3", "comment": "Malware payload", "value": "34cbacaa909489687ccdbc7e9df12937", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853841, "uuid": "d7d9b559-d4d5-4492-b1aa-38b40d6c01b3", "comment": "Malware payload", "value": "c7977c23604f429a11ab6e37c3c47acb970393e57634d093db35af81ade01e71", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853841, "uuid": "172ed735-b4e1-4a1f-ab23-7f0fd3cebb7f", "value": "T16FD54A52B74971DFE44A27749027CD46AE1E02BA57184EC3A82CA8FA7D63CC516F6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853841, "uuid": "cea628da-b6a7-4904-a717-6a5f1295eab0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853841, "uuid": "8799d085-b912-4f64-a679-c2d4af0e505e", "value": "24576:SLtnLwLYgHLbiaSPVEBg7A4DLgoxvFfUHiDbqlyiS4YA1dNybcCSQfsgN693VW/V:YnUpHLgVEBg08L1UiDOzTjxj3whHNW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726853841, "uuid": "2d06ac3d-60d0-46ac-a52c-981ab8c1a39b", "value": 2910720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853841, "uuid": "fccfa23f-5ff0-4933-9905-2e714905d76a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "badc3a32-7777-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726854159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854159, "uuid": "ef5700b8-53da-4ddc-9546-6a561700d26f", "comment": "Malware payload", "value": "2199799af2e3c87370ac0e21c194b4cd", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854159, "uuid": "5feb00d3-2de6-4a6b-b2eb-8b0da8fecee1", "comment": "Malware payload", "value": "5f915c5f811a99845020d58b3766a01012e84025371962753e0edaebf719c5da", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854159, "uuid": "10b57ae5-4aaa-48a3-9888-8bd0ede81c6c", "value": "T1BB46CFDED1AE44D29C053FC998241ACB4B2847728A7400583A6F7D8A5F774FEC05EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854159, "uuid": "4fcb8bb5-4f60-4464-bb08-1a5be8ceca87", "value": "24576:Dsczu6K7nXCmOhMfkuMrGJnT//u/hyukPdzOSZU/5fNfTbBWvhmG7OdTb+FP9LDT:m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726854159, "uuid": "61a1354c-78d6-45ca-83c6-da4e04800fec", "value": 5823380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854159, "uuid": "8bc436ed-2d9f-488e-b6e4-00bb014f9a71", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1340fb8e-7778-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726854307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854307, "uuid": "5bb37be3-84eb-456e-8ff3-0cf3435fbd7b", "comment": "Malware payload (Mirai)", "value": "db656b1982f3a62edc5a10bed221ed50", "object_relation": "md5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854307, "uuid": "93105228-5481-4f4a-8c34-5a235455b125", "comment": "Malware payload (Mirai)", "value": "dc209f858cd79958ba707f19ebb4113da4fb94f92cf573a7d836dca9cd13b5a3", "object_relation": "sha256", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854307, "uuid": "b9dadf84-8174-4f51-8bfa-edcb77c52781", "value": "T12FF423D1B029E813A13180FE0173A76AFE7D4C3582F852521B60555AFFC2FD3E9A57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854307, "uuid": "e8a72106-8373-4d37-a6ea-859d0ec35177", "value": "12288:rue1CfJtcDvXfbd+tDmuOTcAkNjC3ZZk5rgZNTYQN0BKzC6Qabx3qs+7n:r9kJ+DvXjQt6rcFQ3nklg/YQKeYaqZ7n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726854307, "uuid": "8551b8e4-c47c-48bf-a6aa-636a465cce7d", "value": 730732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854307, "uuid": "25bf6a51-b7af-4663-922a-07bcbf37dfd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854307, "uuid": "e07329bd-d22a-439f-ae21-9653069a07e6", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35ff19a0-7778-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726854365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854365, "uuid": "7321d173-5625-4e3b-9a41-d179d108d15b", "comment": "Malware payload (Mirai)", "value": "c0927475e69b86d2d9d5591a80036475", "object_relation": "md5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854365, "uuid": "528bd23e-16b0-48b4-854d-85999c55183f", "comment": "Malware payload (Mirai)", "value": "cf0c9753cb86a46c67ca555c350acc7e3c905f2f32ad914b580682b05b14ac25", "object_relation": "sha256", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854365, "uuid": "4ba0b189-2e0b-4dc9-9ef1-119bcdab6e20", "value": "T1DAF4331E4D47E8549EBCEDF2835B3A57FD6E27893B0A08119A12D50EED70CC77C292", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854365, "uuid": "45d0ec69-57c0-4468-a437-02cf2c71da69", "value": "12288:Qz+BBwmLBv3GrVOdiiW9z7HRQ7o3gnJBaGAQBoiGOJKvdOH38muO4xSbE08JR4WN:QGwslWrVOE9jWBnvahQBHGA7s44wErR9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726854365, "uuid": "29ac2f0c-b5b9-4c5a-a451-9d6f9881ecc8", "value": 731076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854365, "uuid": "5bad0eaa-c9f6-4ae8-a413-21edeaf1b650", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d54ba69-7779-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726854727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "4550d2ae-cfd8-4c05-ba75-361ede6f281d", "comment": "Malware payload", "value": "43bbc4cd6e2e9617cdba1d8819682529", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "96de8743-962e-4f74-b00d-059d5b0fd1d4", "comment": "Malware payload", "value": "822e12ea14be1edf41a4e1998d25a501535a43e8ed10c29919f8a41609a48fe0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "dbc9a2f7-67de-4f7e-94e6-f3c1827a14cf", "value": "T1D9019EDF3015A5852C49AE14F0658CA7F146AEC379B44F2969470D76CCE55203239F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "23ffad43-6fe1-4715-9627-d663977a45d0", "value": "12:qTsULLsiNIl5ztsP0LK8tsuOpsizscYsVSRsotLspsWufsSNRojv:WxNI7XK8/Y3Z0tO2ojv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726854727, "uuid": "5f0814bf-55b3-411a-acfb-e33ca463d98c", "value": 766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "c1761d43-da48-469e-92bd-4e5985cc5eda", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d5692cb-7779-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726854727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "56d56f46-585e-471f-b2c6-3848168be70f", "comment": "Malware payload", "value": "45fe87ed86807281aa391378b9dc90cb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "255f49bb-54a4-4886-b8d8-0657bc42955a", "comment": "Malware payload", "value": "500048115407836ed43eb0018073fb05b8706cd0a4b032fbfb9bbeb098b723af", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "097b4035-1e3f-4c6e-b391-cea27ce41cb7", "value": "T102019ECE3099A1D62E0CAE1CF066C4ABB042ACC3BDB04F29E5578E75C8E523032343", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "40326bbf-d8fa-4318-abb7-ed3c31cd675f", "value": "12:3J33TG3ULLG3iNIl5ztG3P0LK8tG3uOpG3izG3cYG3VSRG3otLG3pG3SNtYA:3J3djNI79K8JcNJUttA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726854727, "uuid": "1b352135-c5e4-4a4b-9d2e-2d61fc6817d2", "value": 718, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "02f9595d-8c1a-4ce9-90a8-d927fcf7533c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d7526ac-7779-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726854727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "40c3aca0-6194-4c8f-9733-d4e64e8131b3", "comment": "Malware payload", "value": "e0db1d3d47e312ef62e5b0c74dceafe5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "netcat", "colour": "#c53a03", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "b58cf785-f469-45d0-92a9-3e4ac59802e5", "comment": "Malware payload", "value": "b3b207dfab2f429cc352ba125be32a0cae69fe4bf8563ab7d0128bba8c57a71c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "netcat", "colour": "#c53a03", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "aa459d64-9581-4536-968c-308c6d9b4a1d", "value": "T140F21905D10AE4B2DE5204F4C8ED9DBFA336E04699204C59FB899970B73BE2567383", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "ed25f592-13b5-494b-aeb8-c5fc64fcbc0e", "value": "98ce7b6533cbd67993e36dafb4e95946", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "19cc577f-9135-474b-8250-8e20c412f6ce", "value": "768:SyMPVzXjrEX3wVdvEs/immkrYKoc4KYIoxU:DMPdrEGdvfamnnT4lIoG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726854727, "uuid": "193df12d-f77d-4f38-b278-6d17a5c792ff", "value": 36528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "9176819a-a98a-45e6-b2ce-770820df99d5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d7d0505-7779-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726854727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "e0189792-32a9-40a2-a8d5-cc5b9397db59", "comment": "Malware payload", "value": "b3664dc74d0261fabb161d05daaec1c5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "d1ecdd0f-31c9-4ec2-bc96-482c00a2c688", "comment": "Malware payload", "value": "a47898111ea0d27373036e3d6f55e4ec96b824c553c75ed1d17ecff7f93975e7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "0f326cd4-227b-45f5-9e38-99e7cc987cd2", "value": "T1E1110CCF3059A1911C8CAE44F065C8BB7045AED338A00F6D694F8DB6D9E5934B335F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "3c204ad1-abb7-4b8b-9720-aa30738e9d0a", "value": "12:8TPULLPiNIl5ztPP0LK8tPuOpPizPcYPVSRPotLPpPWufPSNtYA:jeNI7wK88Zg2HtQSA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726854727, "uuid": "2612dc9b-e33e-4add-abb6-737500eb496d", "value": 876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854727, "uuid": "b96673ef-334a-47f1-a604-0b54e82d0bd9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2346889-7777-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726854828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854828, "uuid": "e5e4fcda-499e-4ebb-a51e-1f5a51fddca7", "comment": "Malware payload", "value": "5f67f25f7f6c3ccbf5d55a110c5da77a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854828, "uuid": "6dfda578-cd9e-4307-9932-43b69b5b5aed", "comment": "Malware payload", "value": "ee0b046cc9f12526a8fb3b17639fe73c683edb0501a1abdb35e73a02bb91fd8d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854828, "uuid": "bf8c78dd-1389-414c-9c1e-3f19cf78ed57", "value": "T14795331FEA7332ABCBC283355B839554BF40BF4D96C7C1252568C2776F1B097AA6E9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854828, "uuid": "5cc61729-b8b8-4175-ac7d-2e6f686773a9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854828, "uuid": "d27a3dd6-77f5-4afa-992d-b099f6b750cc", "value": "49152:relxF69ot5HGmrK93uho7ABM2KuUk02HjJRYZ/ilE3H25:E3NtdHKOwn2a72HtRe/8E3HG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726854828, "uuid": "8d250201-9bb7-4db2-ab0f-0fb459978e6b", "value": 1903104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854828, "uuid": "f18aed38-5b65-4289-beb8-2d979fb7219a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c3728ce-777b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726855745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855745, "uuid": "210e0ff6-a402-444a-9287-f5da21fc1296", "comment": "Malware payload", "value": "d687af3b103399aa245807bb719878b7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855745, "uuid": "cfbff9b5-bb36-4943-ad6b-f329dc9bb7c8", "comment": "Malware payload", "value": "cc7056857cec7d81101af02d79431f4e193090fef7d505d1970d4b2846f385b9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855745, "uuid": "0508b1c2-251d-427c-9a11-50d34921297b", "value": "T18A7423A2C2DEFD82CC10AB773C5920E7F624F326A280854B1126D1BAADD875737D19", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855745, "uuid": "6e405bf6-22c9-463b-8e81-e61d80f0cbd3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855745, "uuid": "04156387-9e1a-4c35-a10f-f86cbe7424e1", "value": "6144:bhywd9hXzy09jGc0Ov7VdLiMVgoO/5Zu6p9zMYNERq3z3tP9PGHUG6rVxYF7n3oO:44hDdj3FO/5ZRpRNnjSqSnL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726855745, "uuid": "43e37307-018f-4698-af00-3f8cac37ad91", "value": 361336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855745, "uuid": "122457b2-339f-4aa6-8ea5-56537f87a146", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "928b3112-777c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726856239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856239, "uuid": "beb69f0b-212c-4bf2-83c6-e2f886b3a964", "comment": "Malware payload", "value": "86049b6becb16ab24d68b42ecdda5384", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856239, "uuid": "b89ea574-f3aa-4767-895d-8e8b6019798e", "comment": "Malware payload", "value": "66d97f40b83b98b4567bb98bbd8f4c4d79d44e731bbd607ecc7fd1d80ec41c55", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856239, "uuid": "3e97d917-5461-4839-9f6e-ff274bf44040", "value": "T1EB66287A9B4345C8C13FA17ADC827F3FF4186AE843A9591BAC0508FCA755791E8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856239, "uuid": "0af67f7f-6616-4ca2-905f-12fd05181f89", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856239, "uuid": "47da9e13-d15a-4515-ab77-9d7edd89412b", "value": "98304:swgfjPCkbYWdapDnxQlkBccFDe8nSArxRWl:sNJc5rmuc0IIRWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726856239, "uuid": "9c86be08-1e79-40c8-8570-cba0f6487bbb", "value": 6632592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856239, "uuid": "d2bd70e4-3ded-4abc-83b6-e84e20dcb343", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c45e8854-777c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726856322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856322, "uuid": "58dbb74a-ac74-47a7-ab0e-0488f757cf0c", "comment": "Malware payload", "value": "1031292808ca3237fb3cdfb53ba510df", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856322, "uuid": "7308b1c0-23fb-438e-bd9d-2338634e36ec", "comment": "Malware payload", "value": "5c700a7e707e9e2bf66bd10e6b1250e08a37c2e98a27af4bc1dd15b27c63b2c7", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856322, "uuid": "a0e4dd86-4bd0-4150-a119-6b690cef3176", "value": "T17EE32A45FC519F12C6D212BBFB4E428D7B2A17A8D3EE720399255F24378B86B0E771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856322, "uuid": "d3e49603-180f-4fb4-9d72-ceb2068b54bf", "value": "3072:pTv4DQSQfT37msa4I6tEKwH8RApCRFcnnG:pb4D4ffta4I6qKwH8uk7cG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726856322, "uuid": "61195102-b54c-436c-8307-1f1b24a765a4", "value": 146080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856322, "uuid": "54643314-f9b6-4fa2-8b5d-8141a6af99c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856322, "uuid": "98797de0-eff3-4f85-92f8-0345148bb114", "value": "t180f05c79cf0c0cdc6bd8484980ed113b24dd35fa4635a502b9de6f5f81265d5b0544", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37d03905-777d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726856516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856516, "uuid": "208b872c-f7d4-42f4-9b7b-22745f6bb64f", "comment": "Malware payload", "value": "2b10c581a76b49a73cbadaaea34de557", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856516, "uuid": "c366b73b-270e-4d79-813e-7f1b74775bd4", "comment": "Malware payload", "value": "b1f8ae6393ff10ebdb0cbd5d67bd1c917390b70c5b3d7359e6644d74a8b2b84b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856516, "uuid": "fe7c868c-0550-472a-b16f-4fa4b6a3ebc0", "value": "T10214E81AAFA10FBBD86FDD3702E90A0535CC641722A43B793574E528F55A50F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856516, "uuid": "d46ad15d-6c16-488c-9859-04e6cc3db21b", "value": "3072:WM1In37HAd4SBI2R69P9HDrd//9kO8eK5nVy:WM1ELH44SlRIFHDdz/Kn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726856516, "uuid": "94f0bf78-ddec-4676-b307-72a3271f0ba2", "value": 198584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856516, "uuid": "56c84470-2b8a-4a47-9fc7-3c8959fa3247", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73542f42-777d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726856616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856616, "uuid": "99a71cfc-676e-4c48-ac2b-f3de528f3529", "comment": "Malware payload", "value": "959d10f15c19cefcd4f516f6beeb5525", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856616, "uuid": "7945460b-c99d-4515-8558-606a7ce587c2", "comment": "Malware payload", "value": "ef374db1e344fee85c1261cd785a2e26c7fdb5f0b0394e7ecd37b09d328c1f85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856616, "uuid": "57669737-5695-4524-9d1c-eb9d4dedb6e7", "value": "T1D314961E6E328F6EF678C73447B74A209B6D63D627E1D685D2ACD1101F2028E541FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856616, "uuid": "a7730e26-d536-45d8-943e-a75f2295ce20", "value": "3072:L53ODcjVGf+p/ukaCNLaYRkAOTMHejn/Sno8UBnFM:LZOD4VGf+VukaMinwHezSnpUrM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726856616, "uuid": "66d20c38-1ea2-4639-b541-e9898f329e62", "value": 198584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856616, "uuid": "77b37f09-3b66-4d30-aaa2-3bf1e0d96d7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856616, "uuid": "09313b50-b222-439a-828a-d6418505029c", "value": "t1a4417058097813b0a6755c9d089dff26d6a730db7e1a2c278e11e86ee769f839d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb650c64-777e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726857247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857247, "uuid": "29040f3f-a1fe-4635-a120-764a24be41b3", "comment": "Malware payload", "value": "37db5de2e674bca47f6023288c8d2ad0", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857247, "uuid": "93112c7d-76cc-4783-aa2d-fcc5e714abc9", "comment": "Malware payload", "value": "2925ce4090758ce2c7ddd8fce70baed3729ee7a0daa17ab6c64c78c935d30529", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857247, "uuid": "3cf200c8-ae2c-485b-9aa0-f345e315f52a", "value": "T1CD24E0A8843C19389F648B8E697DD7A7ED0B33BCE605D9ADCFA47735881B40189C49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857247, "uuid": "b6a6f2f0-2525-425a-850a-c4b56491de34", "value": "6144:B4VYypiOz+TCRhuEmGDi1CRrf5CWw3M/sbjCo:B6p9h0GO1CRrB+M/4n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726857247, "uuid": "2dbcb411-817d-4eca-bb10-a1535cdead5e", "value": 211016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857247, "uuid": "ac7124c0-8096-46b9-90bb-30264edea7d2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bf05b7e-777f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726857543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857543, "uuid": "b17113fb-6936-4498-aff2-c3f08f30e6c1", "comment": "Malware payload", "value": "b11d53661861348b87e3ca75575361a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857543, "uuid": "ddab565c-12f7-48e8-b163-d1e10d339072", "comment": "Malware payload", "value": "fb8d7375fbe971b09b00f7d3c5a0578d184489dbdaae9fb6f6933a6f794c031b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857543, "uuid": "cccbe8be-9db3-46d7-a4b9-3777a930c097", "value": "T111F33B46A6818F13C0D2177AB6DF82453333AB64D7EB63069928AFF43F4679E4E235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857543, "uuid": "7eb52788-fde0-4cc5-b099-3786fab858a4", "value": "3072:ESIT0Rblh3QMg+oyaFayjlYlmOinFY3cgZn8dyaAouM/9KP:MslhGpyaFayjlYYOWYMg6dyaWM/9KP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726857543, "uuid": "21a9a0b8-f60c-4e2a-b39a-9441024dbf30", "value": 165522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857543, "uuid": "af76abf3-246b-4cc5-9ca1-5e59dd4c3864", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857543, "uuid": "ea5f64d1-cde3-4fd0-9cb9-19b00348e7e4", "value": "t1d33165148926891b69b24ab8ddfc47f195154323ab907e319f2ec8cc1525041f61ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "164f41c3-7782-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726858607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726858607, "uuid": "cabb36c4-3f68-4fbe-b42f-152623e10155", "comment": "Malware payload", "value": "f4bd077084e9792099625d81fcab323c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726858607, "uuid": "7ab8ffbd-91e6-459a-bcf1-a17cf5c24d77", "comment": "Malware payload", "value": "6c103e8d05cf1b1bbb01f43907916bf376862011bcfb8aa7ef80f48e936bb7ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726858607, "uuid": "5040cef5-3ce0-41bd-8359-62f9a440590e", "value": "T166E3F846F8819F15D5D151BEFE0E528E33231B78E2DE72129D246B247B8B8BF0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726858607, "uuid": "0e2c5867-25e8-4c62-9b85-ee012c36bf3d", "value": "3072:w4flK0ToZsIlX7qzSWHa5FaZP95A/T/KCcznf:ZK00ZLXWzjHaO35ADKCcj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726858607, "uuid": "1ea55cbb-c5f5-49ee-8e89-4dc80fa30b26", "value": 157244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726858607, "uuid": "c017b3ed-d44d-4653-9ef2-81ff33976326", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726858607, "uuid": "9426c4e9-be9d-47e7-9769-acef44490093", "value": "t1f2f0977bde2a1d0c27d60804e19b61170ef876a843032c02ef3c220f02010a5b80e9", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "896e6494-7783-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726859230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859230, "uuid": "3e71c4ca-01fd-49bc-96e3-0d36d777cf2f", "comment": "Malware payload", "value": "99848d0ddfc95e855c62d8932845ae6f", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859230, "uuid": "ad03c38f-f461-4009-a0db-64b656097894", "comment": "Malware payload", "value": "79d833993d87d2a09f6ba97c17af49e30483e7d934950c00c762ef5dc3893b84", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859230, "uuid": "15b848ce-0843-4cb3-a9aa-c77cac3f012a", "value": "T17066283B9B4345CAC12FB57ADC827F3FF4286ADC4329891B6C0548BCA755795A8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859230, "uuid": "0917a6bd-7e4d-4321-bc88-737e2f5802e6", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859230, "uuid": "e19e9ddd-3913-4d4d-a8b3-2228c07d4d84", "value": "98304:BkuXLm0IH9OJy/fZ6IcLWTMEKJRnghQICSeli4EekEJ:BXXLmz9OJyXZ6IkkArsQAqiPekEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726859230, "uuid": "a1d9707d-d037-496c-a946-c009f394138a", "value": 6677109, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859230, "uuid": "c50b43bf-fcef-4f99-a9af-3453855aafc0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce38bea-7784-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726859746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859746, "uuid": "85cb263a-4fcc-44ae-acbf-989cf888014f", "comment": "Malware payload", "value": "571ba6f2c1ff338266878d12aa511e16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859746, "uuid": "61fd487a-f556-4b8a-aa84-dcfaf950ef64", "comment": "Malware payload", "value": "fd755737d2089994e4703a5bea832f80d3f761916be4953303cbfab3181bd5a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859746, "uuid": "e475e65b-d7c6-4019-acdd-c9f784ee2c70", "value": "T1F682848BE7518B7EC88D8378449B423426B3E4A1E71397273B08B6341D437D85F1EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859746, "uuid": "41d89ae4-dc60-463c-b30a-5f92c74630d4", "value": "192:RnxzjwsWskaDanX6JENuZYhz0h+fcfLBj4WyFLDxTJJ0lfKSD3BgS:BWskamFsqGhR9jClVdSl33", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726859746, "uuid": "3734503a-e9d6-4454-82c5-d122ac82d5ad", "value": 17967, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859746, "uuid": "bbd46cee-a2fe-4400-ac46-e1c1d3b8aaf8", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859746, "uuid": "1bfb2638-f132-4e88-89b6-47887a093faa", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05183173-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726859867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859867, "uuid": "6d7803d8-c8e0-441e-bee9-0427972961cd", "comment": "Malware payload", "value": "d6629afcb91bcdebb4ab6b244d3bc3b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859867, "uuid": "22af8e29-74dc-477c-ac1d-77e005525f9f", "comment": "Malware payload", "value": "3956ea48c17b1ea1093f413d956471131d307041d00be2be589129b55dfb897d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859867, "uuid": "01e26523-f453-41ca-a8ec-625f2f105b8b", "value": "T1A0E34B1AB5C194FDC8E9C1744FEBA1369A72F41C1238B21F37D8BB622E4DE205B6D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859867, "uuid": "9fda8fd6-9590-453b-b466-b2cf586bf2a9", "value": "3072:cuinpc32cD4cFppjfch2+Go/HRTB3Mk/u08A1BbpR:Gn6m87c9DNM0R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726859867, "uuid": "02d0cd43-8675-4abc-b989-501e2736b867", "value": 155752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859867, "uuid": "16cf6ca9-3178-4a65-81c3-3a6accd6ab19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859867, "uuid": "1b1d72e6-6b97-4508-848f-219be2f94c64", "value": "t15f51cdb13d563a84b1f3f622b34ed5a69c720e2145e174e0af7368e4cf52b850db24", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c843e2cb-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860194, "uuid": "945cb17a-3853-42f7-bf0d-f5a6b8b144b8", "comment": "Malware payload", "value": "9e73edecc13d48a931257849c4036190", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860194, "uuid": "09b3c898-fb25-4852-a401-60c070265ffd", "comment": "Malware payload", "value": "72d4242770645b7a8fca782709e19d5497e53c55fd40be8d840b1af0b10236c4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860194, "uuid": "4f4b0c5f-f410-47fe-94a0-245245256d44", "value": "T1CDE4224A378DD3A0C5A94978DAE3A11184F287075E33D212798D9BC49E93BD5FE80F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860194, "uuid": "f80a68de-3724-4034-96e4-0d6804d12520", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860194, "uuid": "46c77720-60f0-46ff-90dc-08a227cdb659", "value": "12288:leSh8aHgOgcpd5dhwnrb5yMdjKFqhgWGLOpEl6hjjhQynq14Jk3GzhmoIgwBvdXm:lZh8aAOxpduuFqhPVRQynZJwGFmooXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860194, "uuid": "dc0b6f69-1354-475d-b45e-b1dea585cb79", "value": 721408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860194, "uuid": "11c7db8b-a50b-457b-87a9-9c82ce96862a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c920e6f1-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "31cee1a2-d7a2-4d4e-b88e-e8a35122b26a", "comment": "Malware payload", "value": "1c8137cac518687f8025d1003eca7813", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "daba3fa1-da4a-4cd0-925f-de92abaf056e", "comment": "Malware payload", "value": "091c1c462ebb843b43cd57bcb3f7fc9254cfb2804eca13958c06c1db117aca67", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "600217bd-ca20-4caf-aabd-7faf0e817602", "value": "T1357533FDAFC150BC3DB87DAF8EA8B56D967606450C53B00024EE32A6B538DDC9D6D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "6db312b3-ae6b-49e3-b9c3-42d83834a045", "value": "24576:Zy1/lmE5mh255ien7IZ326ye9OF4OELP9p4uPXB3SudEM+E1LYIyOOUsvaaVviJd:Kmh82329fPELpguT+E1LYWOZii8/2wbT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860196, "uuid": "ea593f9f-99d3-48ea-bc39-50b9ef5ab710", "value": 1563144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "deab36af-18eb-405f-9eef-c677ddeded82", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c94b658b-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "a8171e12-8000-4183-a9f1-11efb4a85d39", "comment": "Malware payload", "value": "2368c064a671ae049c77c7b5b35ed8ee", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "98208724-8e0a-4ee2-bb06-45e24488f66a", "comment": "Malware payload", "value": "c59e7863c2642ea67d65d5b69322da8ca1db067235281687ffa29e948f939ea9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "2d67d44a-48b0-4e99-a4cd-9fd386118de0", "value": "T14575338A1670F504F0DE0DE97B39A643B9E913E3265E930F32389858B05359A3CBF6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "b058b5f1-9cd7-40da-9a27-6d90ab4cea59", "value": "24576:WLZrnPdi8A31uLbVPLWc+ymHztBtG//7BUBvXHjBuRJZlFUDQCftEZ9qMUZi:yn3e1mR+y0vutvJPFUDXfMIvZi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860196, "uuid": "b8d87bf0-c551-480e-9456-4e5897fea78d", "value": 1562120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "b2843e26-5a3e-4e2a-acdd-63a7dfa950d8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c95c0368-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "e6f7b484-f764-4dd7-a843-6a730d783e79", "comment": "Malware payload", "value": "a4717539409fcdf754a46d0976fbdad5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "214ec9d9-9cc5-4ce8-b444-3e63fd2cf67a", "comment": "Malware payload", "value": "60c767133ce1785908342abb6e864a1179d4f84b15d17609a3162beb33728091", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "2dff7f52-4332-40de-a78b-29acefc44efa", "value": "T11A7533B0A3D071BD32F8C967A93E6AF860C18521167CF0EED65B94E9B197600F3194", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "5108d221-094a-407f-9807-1b87200b9461", "value": "24576:apQjGcmSukh1acm3s/5A0+4S4idtIYp8WPS0m8oYOkajq5ZKEJ+J3Vd9APlM:aCjGF2hccm3s/5e4TYtIYp8uS0kYOkAh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860196, "uuid": "9949e2a4-b0da-4266-ac32-4e4193289a78", "value": 1563144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "6b356a86-8cc3-4770-b964-40502fff1411", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9984694-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "ff16fb63-4079-47ca-88c9-39fe3ec2af33", "comment": "Malware payload", "value": "fcc4801b176ae41c30771f630fb9be10", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "5315eaf6-f200-4179-937d-17c61be9a71f", "comment": "Malware payload", "value": "cd51bd375b175dbd228c8b7c73a059c49d7491cf1a27dc786691233f53243f16", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "70257a88-952c-45ff-9d8b-6ab9bb891393", "value": "T1687533A4FD8C238E4B6CEFAF934085D5E511DF8C2B9952EAEB00DDAF0418C6DB540E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "6f56332c-116c-4b3a-8c5a-c5dc04cef1a4", "value": "24576:3HEBynS3E2dV0wefvkaxgyUYCjD+5CgjyC/JlyptU47sQBIqhCQXw6Ru:3HEj02Mw+wylCjaQqyylIa4dmORu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860196, "uuid": "4a375893-0373-443f-8dd7-217eac260666", "value": 1566216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860196, "uuid": "f94bb95c-e8ef-482d-9c75-dc214da7e492", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9e96b9d-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "36bfa0c9-4e42-44c9-9d45-62a26aaa441b", "comment": "Malware payload", "value": "92b509f8a525fa34034e9fb465a15891", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "eac9ef62-ca17-4629-a821-d4da2a6141c0", "comment": "Malware payload", "value": "8dd61d4f09c02c91a60dec0d0a57675ad2535956d4df17ca7fec2ad11e4d4b26", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "85ae9d0b-0890-4e18-b0fb-dc8f559293d5", "value": "T1957533FAE81B56ED2D4ED83ADC6CDCEB8FC029D8199E74C2523446AE0808257F45C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "71ef4cb8-2a14-4dd7-91a8-f8edbe29977b", "value": "24576:3i27LcNcYrPta4MSNLfmdd8wv1QkNfECha6YOzSTFgHOcWKWaRt70lqz:3iggBLtJu4KBYMDrJtIIz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860197, "uuid": "e9218c29-ed97-4280-9594-d828ef5c239a", "value": 1559560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "6eb2ff97-3cb9-49fd-b7dd-9330325b5abb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca152555-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "977fddf6-05f1-4cd1-afa5-2e6a4bf534cd", "comment": "Malware payload", "value": "f8ed94993a19a50a917741b86e2db940", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "6316dc7a-fb1e-4260-be57-8eaf8e2dcabf", "comment": "Malware payload", "value": "36475a7ee19d654431fd1a80bbefc00ec49bf532dcc9591e9785f3cdd96a4af2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "2ee855f6-ce21-4591-ba67-401273c9d9be", "value": "T135753385DE88E5211B8D7313DEC8A133B9DED7337A91A696488EA4BBDC15CE483450", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "3262703e-1183-4f7d-8e38-83b432a6e0de", "value": "24576:8AaR1U513wFUF1bQFMBdNrp/HzDwRIzUamK/qyDQcl3UBtMq4iBQQTTrO6vcdNbk:8NK1AFUF1bIMbPPxzUamuqyDhGPMklTL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860197, "uuid": "86a2f88f-d634-43ba-8e0d-98567b8eaca1", "value": 1560584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "8042e08d-2198-4d9a-b5d4-1337b89fdfb8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca20f182-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "ac3112cd-dcfb-4c6f-a062-ac50e0993943", "comment": "Malware payload", "value": "7bcff196adedea4fb1b2d04cea91affc", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "22ffbf05-7e88-47db-ac79-cf384367bc3d", "comment": "Malware payload", "value": "209d1f01110a434b800bc4942843bc5eb5ce6c9f8fee58b61df0ef9aab4bc332", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "a8278971-73c3-4c86-b060-6340886ade61", "value": "T1017533B27ECCFF15DD3AC68C25F8FAA66D141B14E3061B0D78B5BA08856E4D552E2C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "93de5f11-9769-4f92-8540-fe5417157a54", "value": "24576:bz9b3w0w+aIPoHLHDeOGX6PdcjjMd6YM4gdhy8UCbzLBFquyHPxIqvI8IdxxpipE:bz9b3jreDeYdckM4yy8vzLXqz74Si5pt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860197, "uuid": "0ff2addc-9e12-4351-adf9-e57224feed17", "value": 1563656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "e50ac2ee-71d7-4e36-8a38-2bd59cdbedcd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca46b3fd-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "06046296-ae9c-41a8-aaa2-ed8d260f06ef", "comment": "Malware payload", "value": "f2f3536a099520020d6c0a8f6012f427", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "2310de3b-a603-4df8-a86e-2d510f5654ae", "comment": "Malware payload", "value": "ff6f9d9137d5de58ceee6e1cace1b9cbed61605e834c015dff31077ca88bc8b4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "dcd5c9f7-2248-42f0-9126-16ab58182a11", "value": "T1757533B6DEF738A32643C261593C6FCC16A2911D9EF98F87C4AB8D93504D850BFBA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "9574379d-1012-4239-9f2d-9373d7ee462d", "value": "24576:pIwIr9FTL9qZUkDMN7Ads5Z2RHZLig1Bwc1JIXAOhD86biDbtP5YJ3dCmNZxiT9y:pIwc9Tc1YN8ds5ERH7fN1kAO6btP5SNV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860197, "uuid": "64cb59fa-5921-4566-b139-1b9b9f13ee5d", "value": 1562632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860197, "uuid": "f4470b48-55bb-4944-b8e7-d52418eaffc3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca4bce97-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "6d01848e-aef3-4379-8bb1-59457a5478ae", "comment": "Malware payload", "value": "5e88fe90aaecc2a1ba70a8fa5fb08e18", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "d921969f-8752-4be6-9f12-c2cc523a2597", "comment": "Malware payload", "value": "17238fc549d35c7f8507cfd9b8e68f5cd575482ce46ad1581831d2119407a522", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "062285fa-c974-481e-a059-49d7f7ab0c3b", "value": "T11375332BC26273EC8D31331B9832785663AD763E8C1B3BB574D1B114296B76D30266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "3c1619af-cf1a-47e8-8975-2dbc8b71b4e3", "value": "24576:4Dra9AltFhE2gTXsA1VgmPpneVSYnkyv+bgNb7fKnZoXmQRUe1ve0AuIivN:469AlLhmTXsavcVXSEgnZiNiee0phN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "a22ed080-71eb-4317-ac9d-2f84843f16e9", "value": 1565704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "c16d8f55-f2f5-49ea-8886-bf911cf612cd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca5d90b1-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "d6762beb-16c7-4d80-9c17-051f8ed9631a", "comment": "Malware payload", "value": "7780ab5a142ad27eb57c3fa80ee008f1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "4d801d2b-f635-44f3-bc70-29cb135b6e3f", "comment": "Malware payload", "value": "c9b9f20b1c31ffcd684cf69ed4bdc0644a3ea22219e968b08f52e7eb61903ffb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "b5a50514-d6b3-4cb5-af2d-bb87472ed1d9", "value": "T1927533DFFCB1DD7AB0EA7C4D648521EDAD86BEFD1EE6A4FC9096204891718D00A160", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "6d21cb2e-8162-4e63-bee7-b0cdef9b3b3c", "value": "24576:siZgfePjvVYCmGH88kfBV5R2dvfrArGjAR718nnIBJje0Z8EqVHMJwPPnWqCF1gS:HZs/cej5RmvfgAAbYnIBJPYVntCFZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "b22f3695-3dbb-4787-b241-3f87150f11dc", "value": 1561096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "3bc055a1-70cc-42e5-a7a2-48c31cfa54b0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca61ac1d-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "3cc104b0-34cf-446a-8e63-3ab7f9e41d4e", "comment": "Malware payload", "value": "474a562b0dc9872ad3e4d0d00a0a6db0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "b53ae735-1553-4e3a-94ce-7d11b04d8270", "comment": "Malware payload", "value": "ba0e924ba1e97938db661af1ec0a23abafd3af558491854c2b7d7276a7090809", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "2b3bd779-aee8-4346-8cb1-72baa08ab790", "value": "T19C75330295123A174C89EFBA759C80BD216ED57E4DF11740F81FDCBCC22AE1887E8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "6ab42225-8ea8-4a25-885e-be24da8e8e9c", "value": "24576:5uXy8SLGAayauUqaWpKOBdrGMVqT/kvwIkXJqGcg7n9pJvqWrVVXUOkh18GGhYak:5uv1YPpnr1qjkvaTVBqWZJUOkh10+aFS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "5041be57-0084-4238-a4e6-1bf1f8f5d8bb", "value": 1564680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "96033269-c0e0-49a7-adb6-356931b27a59", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca689d21-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "7622bdaa-37a8-4c35-a7e4-2a95dc5e8d6b", "comment": "Malware payload", "value": "442ee1b928fc1657bcd9ed201f8e4252", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "b2588815-e114-4b0b-bc6a-f95947f5b607", "comment": "Malware payload", "value": "841532e38f8527b98781bf1d4fcebc11dcf6653afe69bd4a77b431e6a512e7fc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "9199ed04-42fd-480a-8bdb-098ff66925bc", "value": "T18F7533BA0D8B0A7EED07F4596885163F7AC39D68E656EF19CD1E24800F7B140B494A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "19f90e54-6993-4444-85c6-0959838217af", "value": "24576:cKCDoC0MVPFAeCQpz2xpxSQADkf+7DMZj+AB43sCLkhiSaK5d9sdtd5tg50YqNu1:cK9RKAfQpk4p/4ZBQsCLkhiS75DQvfsd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "5ee8a743-ae63-4b9f-a627-bcbd78cdce59", "value": 1562120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "85ab0e09-c2f6-4d9b-a284-69b5ee9064ae", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca7224ba-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "dbddf5e9-5ed1-4ec8-90e1-cf541a8ecae6", "comment": "Malware payload", "value": "1d6a56429c5ae0d1cbb6466abe494832", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "a568021f-57b9-4513-b8ad-12112c16b1a6", "comment": "Malware payload", "value": "85e7fa40d6da7f0cd4d2fe18242739c9cb9c70a91bf8492dc3dfaf2ccfc1b332", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "c9c5ebaf-ac3b-4daf-bf16-82333f8216d0", "value": "T1E375338E7B55A61B3A87B589F41FB86AEC4C7547C335CF3783A98749C211E1083B16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "9c3982c6-bb14-41b5-9258-0b3fdd8c3079", "value": "24576:YY4gZKLy0AlVMS5JkMP7GyL/N5GYMAUmZThAUTNDQnLUyj5GOdP+ZgUaTTkL7dOU:YY4UKGlyo37Gi5GlpmZTjTNYRJN+paTk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "417ae252-1cee-4205-9383-8f85cdd5fb29", "value": 1561608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "782f467b-51b0-40b7-9ed1-6e1b8bdd3fc6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca7f23aa-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "bcfc37b1-fa69-4278-83f3-ce261403fd65", "comment": "Malware payload", "value": "a0ef6d9841d758b0df46ab87b2e08862", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "0ef206ad-890e-4907-bac1-add947f1b362", "comment": "Malware payload", "value": "c6d679dfe97ac22c5d74abfd151a2cf10fc7e5c2119bdf02db2d233592ddbc47", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "cc174bda-5171-4e72-ba21-c2c87b0243a5", "value": "T1E3753393297AD32226A5D79A4FC2901939007B67B3006C43A4A7D0FADF93B75503FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "378220a9-bccb-40ca-a44f-a60e2f09fb75", "value": "24576:wIksDgZ+XVXv0EcK+kFb2p5jwV+5meoHhg5Q49UaYCtSap+Qb3ejKAI9pDYCeitV:vX98EcFciBi+seYhg5QFnCtSlO3wIgZW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "6a98f9e8-9914-43c3-936f-b644112a145d", "value": 1562632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "e73181ba-1977-47b8-a0a8-edd1d6903f1a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca819208-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "1e7c0e65-58a2-4dfa-bf2b-d6965c97ad12", "comment": "Malware payload", "value": "cccd7bad3f507e5dc182644e9e2164dc", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "06ca59bb-8da1-495f-93cf-58f9991a170f", "comment": "Malware payload", "value": "23f680a487f25e782fa00e2fe786f958c85062f55ba3d6e05d4850e2f962d8d6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "958616e9-8d67-495b-b576-86ed37369dec", "value": "T1177533E6B18FBFCD14993FAA58807D42F451284DCAE775CB84640F0156F781EBAAD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "83cd600b-8e93-47ef-b404-24dd305bd3fd", "value": "24576:vMJlAuw1WW2Ygv1d2aQFXfH1rtS9AErDfGriof4dHFqB5yeGZhWpYcA1JQsUt:W6uWwNgBFXf3S9P/W7IlS5yEa1JQlt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "f9c0d8a2-2955-41db-a997-93ab70d0c1a4", "value": 1561608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "b44a84ce-6f07-40f4-9c24-2783043b9293", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca84d6af-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "5149b4db-326f-405a-9e44-d8b30aa582a8", "comment": "Malware payload", "value": "41d67287f250f15aeecc8e96d4558901", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "1d9ecbc6-4066-4330-b9f9-c9ba2455c0d7", "comment": "Malware payload", "value": "cc37f1d9eb5c55338cfc216e16cff806b0ed99af626e1feb6e956ab9b859a40e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "5d7c97f0-f76f-4e8f-9bc4-8df6fcfc5c0e", "value": "T1E775333BBED8C49585C5E49DD8BC2597E4B6BE912F1B7187321BB760114B0AC7EE02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "f18906ce-6627-40eb-999b-9446183474a5", "value": "24576:xkutbyofmbg/2YCVM21Oouj1AGeMQg01VCNP7ZcdVhXD9IrCTx+rnyqno4M:+y2YCVMWOvj1AGP0mSdX9GVyqo1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "65e4975b-67bd-4da3-8cf8-326503db980c", "value": 1561096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "b692f20a-04fc-4c9d-8149-2d5eeaab6ea9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca9d39e8-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ac20e891-ed1e-4e1d-9ef2-38925c833441", "comment": "Malware payload", "value": "7023ae3e60f89dda23b5c7914f51130b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "821638eb-a17d-425f-9f66-6be59bb5b8e0", "comment": "Malware payload", "value": "f026e287ec0d4ed9890e7349f81cf00425e944944cb65cace2c24ab236415cda", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "c83e1b2a-315d-40ec-a12b-375e9aa33c72", "value": "T17275338CDFA56D84B035D419BC9DB730E3F6589AF84D65968722C3653013E2AEC0B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "f1171bd4-2f83-4388-81dc-e0ad887cefa1", "value": "24576:u0Aja0XxfCciz1Rdxi2BZhxNCGqCRqw4tLbMLxZfzq8xglh6NMpt3hFPldadDFAH:u0CDxahPdBhxgGqOELbMLxZbqTlQCrhH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "286cba99-8a50-4e0c-9b8f-b2b18b5bf496", "value": 1561608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "b7c6e0a8-0b9b-47d0-a0fb-a15a00736a9c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caa1ba1c-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "02578391-2d41-4b06-b723-4730a8deab4a", "comment": "Malware payload", "value": "8fcf83aaf30059c28387857fe493aeb8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "75353c5b-bccb-4416-9f0e-63c95db62d22", "comment": "Malware payload", "value": "bfe1f986a87455d787f5258ed7196bc3636eeb10006b502162f71dc7024f8109", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "21a1b1f3-b1de-4744-a6f9-355e92959264", "value": "T14F7533E4F53744D2D1C5CAD87116D7E8AE408AA6E471D92EA1423B839180DBFBF258", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "e57c8347-851a-4a5b-af70-c34ae820f223", "value": "24576:deQEmKP3FB9ri50RMk08+gb6gVq84v6x5I/BzjOuIoc4qS4qF/edS1zZdGJVW/NN:deQEfP3Nw0R9zVSv5+uIoc4qSxL1aVWr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "a3d4a178-eac1-4987-84a2-ba50f2cc6b98", "value": 1561608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "d90d8ad4-c32b-4814-8781-b3e17feb5216", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cab2497d-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "cad2ba65-2391-4d89-9812-e081086e9845", "comment": "Malware payload", "value": "edc2cdf50c1dd6c42edd6d7d97ac42fa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "661c42d6-fbba-4fcf-9acc-3f9b10087d87", "comment": "Malware payload", "value": "82b9764abfed292bbcb8e6d72fcdc2a37e80646bc0d2cc17d8775f5ce56332e1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "da5bf581-7adc-4270-8eda-507e4d035690", "value": "T1AD7533E227792D5CBF49830DFDD6A1562A12831163539B8F0A9F4EE74B825C241E83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "82aa3572-3698-48fd-9878-fbea1f8b29ee", "value": "24576:EA+enCI0pvtjEJ4TrAvOlOiyK95u3tiri00j0QoIZRqsOhBVJfWFu96gOA:E7en8X/7siyKXu3t/0c0gCDBVDUgOA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "485e7b94-2de9-4fd8-9311-14abd3e64e56", "value": 1563656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "1ccc01a4-d72c-4833-8b26-725204416bc6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cab40b91-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "aff84178-7bbc-4324-87d2-b992424547f2", "comment": "Malware payload", "value": "8e4c9b68e95cf0d062c577a37bb8d312", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "1000ae36-0a50-4e9c-9a42-9bf7befe8835", "comment": "Malware payload", "value": "34b744c6f75cc67dfbe4f61d905b9c1e301cfea6d47e62ec94eaa8281bf58182", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "579267a2-592d-417f-ac76-fc7438a677b8", "value": "T1547533689C75BD5D71AEE7854474363D6286AAD2384BBA7F22B03DCCC8C548F680E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "de557d2f-617e-4267-9fc5-c7e35a28fa39", "value": "24576:tvMLjVIcj8j9FAMoXXStlLQE82iBFKF4hJ20WLVKKR0m+d9eE2XjHR/:2FR8jPPoHoeciSomQVeh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "dca9fe8c-e85c-4fd6-b28c-31db6224d0e7", "value": 1563144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "39be0243-4743-4b84-b3c1-788d51561f75", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cabce430-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "3fed1513-28a3-4089-8d5c-dd4f2993c608", "comment": "Malware payload", "value": "669c0cb591f45349747920695f9c697a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "bbbd2979-4960-4386-8e68-350c64f59a29", "comment": "Malware payload", "value": "c28d6141306237738b0ca283658cc2b1a66a08a4bc098a67c8005959ac730593", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "3994f67f-8880-4b76-bc9f-eba0f4c6db74", "value": "T1DA7533B84BD5D351FF9D916CDC6A68F12095BC1900E3BA7E839C8BEDB85214C502FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "45a63b30-a215-4bbc-9370-2cef600de085", "value": "24576:JE8Xh5o9/M2PM3tT7LZlL1IyYf0UokLVa7sW2uS5bpxJ/ua5a4/J69ISvD:Jxhi1M2UdT7Lj1ZPLkLsB2uS5bQwhOfb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "8604589a-3230-4143-865b-a8495d3e449e", "value": 1563656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "e440eef0-3c55-4525-b150-b603695eebac", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cac7605b-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "c7ca6191-5d89-4fb7-876d-c970218eebbd", "comment": "Malware payload", "value": "43aa881f24e12ec68e75e0df18166d20", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "619b5b22-692d-4667-8d21-5d82e462b7c7", "comment": "Malware payload", "value": "c0304c4d91d0a1141e4eb21b5be637466450a7960cc38ff850683a2b8317a909", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "c5966feb-9b35-4a6b-9877-994c6b572c68", "value": "T1DE7533CD3C1257306AE8FA736563E4BE686A97811283098ED7C587DB836017CB7F10", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "ba427102-1ad6-495c-9748-9181dcf6bf35", "value": "24576:6AVRHw475dPKyrbWsPvSIbsTOUBWcYlKEkxc4XIPE8dcug+4/9XSsuCs6lyaZwCb:XwmdPKUSsPvSzO2IlVkc8D8dnK0/C0yd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "9a3d1dc3-c3ef-4bbb-ba01-d65820ac9374", "value": 1564168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "f368efbf-caae-4dea-9375-a3b748b0066d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cad22d1f-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "9d2389ec-634a-47fc-a425-8cec800544b1", "comment": "Malware payload", "value": "0c113249e79ef7d645be385eb89bcd18", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "412ed9dd-0ea4-4704-9892-f7ff543fcdb2", "comment": "Malware payload", "value": "886ac40ccc0de4e0a4d2feb19156967f8914a279218117fd2e569ea58ae57a3d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "4b2939cc-14c8-4c0c-91e8-65ff93f24086", "value": "T17E7533BFD282875833637E4EEAE0DC923519928A8471094477B36FAF9B300D0599BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "1b0340bf-f64b-43d1-81f6-2444607a2b7d", "value": "24576:Cu1ZRMVL4v769WoYdBc/caV+ljNNF3WolaP9GSnV3ZzaI/Q7X9h3ea5QpFdNDgKx:j1ZR2qBX7DFaP9TN/sX99eEQTngM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "a56109eb-415f-431a-9441-1353a7c3abea", "value": 1564680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "b26da1e9-946d-48f6-845e-d0cab7d831eb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caddeb39-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "53e54b18-c8a7-4cf8-a42b-ff9e42780918", "comment": "Malware payload", "value": "1de3a2e3ce802f837c7e841328ce5214", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "3c56e284-daa1-4f74-b39a-cdf2db5e3241", "comment": "Malware payload", "value": "f7246f8d6f8f518a59cab1cd63b32ba7631261ed7d36d612babd18fbd244be0f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "729b21fc-b8d3-4015-91b5-d324dab3b09d", "value": "T1D47533F6AE126368F08415E1BF9DA790073E6CCB7706BBF4F8A65137116A20910B3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "63c353c9-c36f-43c5-bff2-b604113e66e2", "value": "24576:OCuFRNbjVrtgiBUlwvT3bVYhKN6OzKVhALicGlSH4rWfvv/Q2/I5++c9WHrD7DM9:OCuF5rTKwb3pYhKN6OqJvrWA4I5++c+S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860198, "uuid": "84ecf8fa-caad-4244-a2ff-ab75711a4367", "value": 1563144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860198, "uuid": "d0d9b9c6-6173-4b3a-aaa6-7379b213486e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "547605e0-7787-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860859, "uuid": "436ba6a3-621a-4f4b-9f8f-eb1fbf3be33d", "comment": "Malware payload", "value": "1568efb715bd9797610f55aa48dfb18e", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860859, "uuid": "f27ad85e-8151-4691-9d4d-def86c904df3", "comment": "Malware payload", "value": "f42ef51c4c7c8f607a0405848593369bfc193b771e8ed687540632cad1376216", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860859, "uuid": "5320996c-7f59-4086-b3f9-9f8b910f068a", "value": "T15872C030FE1EC69C04D852D18B894F65CFEEDB85436E379B8767E5838D8B36022532", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860859, "uuid": "eab7d6c4-de6c-4c19-8225-03470452c8f5", "value": "384:LrvXDxrJBiEAkcXzGE+qHYhew/F2Nyoot52DzPW7L:LrvXVJ0MUzj+qH6T2Uoot8DzPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860859, "uuid": "fa0fdf34-bdac-4ed8-bd94-4884359ed2a8", "value": 16128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860859, "uuid": "11def7fc-f332-481e-801b-c4f2f3b1cca2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c0efb15-7787-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726860952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860952, "uuid": "3aa37482-98c6-4385-8525-b9c00b4872f6", "comment": "Malware payload", "value": "51a90246bf49d4dafbb08b08924198bb", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860952, "uuid": "85e32b62-1c92-47ab-acba-9d703fbecc55", "comment": "Malware payload", "value": "4e5fb8a160043c253c45c163c60f30a110ed0e9aa19b31636007b5431dfd08ab", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860952, "uuid": "6b5e1156-5d6f-47ce-9f1d-3b8a4db0ccf6", "value": "T17D119498E5C34DB03CDC9327396F49A0F5D4B8D36AC09F46A4EE36E4148CD04E4322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860952, "uuid": "fd765e1b-d732-46bd-a010-0af602708004", "value": "12:pt0FvnR/0FVyDR/0FLR/0FqR/0F2I9R/0FGr:gveVqf2Pe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726860952, "uuid": "da1eeb8c-6919-4fe5-9e15-18ea3e7c13e3", "value": 1003, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860952, "uuid": "88ee8442-3dc1-4f3f-b20c-2a2f0430f5ed", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f66c4756-7789-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726861990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861990, "uuid": "dcf1d6ed-af09-4356-bc71-8741052ed99e", "comment": "Malware payload", "value": "558e0a291022baeb9586e446725861f4", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861990, "uuid": "deed414e-5977-4c9a-86b5-5fca2b76d030", "comment": "Malware payload", "value": "1fc47b8f8713dea389054d96f8039e561c9ff19883fe870e437d54c2c8775d43", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861990, "uuid": "aaa5b8c7-a17c-4d84-9ee0-7a8683023d66", "value": "T12766073A9B4345C8C13FA67ADC827F3FF5286AD843A9491B6C0508FCA755791E8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861990, "uuid": "af14788c-4b7f-4993-88a3-d3cdf8d9de12", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861990, "uuid": "3f044374-85d2-4e4f-9e5c-90997e12bdd4", "value": "98304:7CVgPDH03+fHMb6rRhmSDV67GlFYkZoAbO:7CVgQW9/k7GbY/AbO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726861990, "uuid": "337bcab8-6aca-4d01-b49b-fc582e2dcc3c", "value": 6633502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861990, "uuid": "71cc5354-81d7-40ad-9d27-224f68035045", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a669231c-778a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726862285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862285, "uuid": "e9b2a737-1b08-4a72-b270-e1c2f63571c9", "comment": "Malware payload", "value": "898576559a722c9b5634768047130f79", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862285, "uuid": "f5d318d6-0dd1-4443-aec3-891234ed9058", "comment": "Malware payload", "value": "0694dc94512d5b3f7499ad78ae042bdd48352f7d2c9abaf04834644ab6859d5a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862285, "uuid": "b853f2da-4edc-4e64-acc5-c14b1382ac80", "value": "T117E53961B606F2CBD49E177895F7CDA258AD02B90F2408C7996974BE7D63CC121FBC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862285, "uuid": "c622bae6-39b4-44f8-947a-7e841fd35260", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862285, "uuid": "5ae0a94b-1bac-405f-8952-6fad772bbfc5", "value": "49152:dg4J1whDSBEQzgjMbskdns18fHkDPwo/tKp3kGdYe2aci:HJ1SDSBE2gjMbjdnf+3/YpUGWe2aci", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726862285, "uuid": "7d44e9e2-194f-4b00-8299-2605f6a02a6a", "value": 3040256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862285, "uuid": "9120e669-dbec-405c-9381-b5998848a07f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ac36f1e-778b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726862507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862507, "uuid": "dad50d7e-e3c5-4840-8d2f-0ef090a2f885", "comment": "Malware payload", "value": "ae1c38b2c0209f39d1c5d544e5a5ecf7", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862507, "uuid": "ee7e5e64-081a-4aff-94fd-0568662fe7b7", "comment": "Malware payload", "value": "7febc09c97d078d9617d71db6c6c41ed7f81fd332a01b7683108c453661d3ca8", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862507, "uuid": "10dd39d6-12c6-4596-a1a5-8b90d01175f9", "value": "T1CE66183A9B4355C8C13FA57ADC927F3FF4286AE84399891B6C0508FCA755791E8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862507, "uuid": "60908097-c771-400e-a9c3-c806638fe6f4", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862507, "uuid": "f44a73c6-653f-4890-85cc-dc75e15f0315", "value": "98304:MR7OR+Fx0lp21eiXdBYt3A0UR9nsqq1MlFC:+KRQav1i+T89nsqqWlFC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726862507, "uuid": "03903999-157c-4817-b05c-980190dd7112", "value": 6625615, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862507, "uuid": "c594773a-1337-42c9-8825-cebb24d25017", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c391033-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863449, "uuid": "2116605f-65d7-4f8b-a859-7b3c17654095", "comment": "Malware payload", "value": "3541b28234a21388bfc57b2058ef9f81", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863449, "uuid": "0906d8fb-d72f-4367-9d47-0729cce7d3cd", "comment": "Malware payload", "value": "8e79767940bcf79558eede7c0ca4a05e0b5756bcce7e9c05d3f3a3562516cd64", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863449, "uuid": "28582f02-c258-4396-ac75-7261c148e168", "value": "T1E89533DA32D19C27D3CFDD39E8D5090F926B91E0B89181EE424EE67472B29B9DF584", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863449, "uuid": "caa2c3ea-1013-4213-a61e-0bd2b8795a46", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863449, "uuid": "f1797808-515f-42a8-81c4-4a49fb2297a2", "value": "49152:5+zVBwZAdPY/jEjZbDOYe9UBBVQ7XapChFOtllP7Z:5MA/oomBCQCKTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863449, "uuid": "6fafd039-8549-48f3-aa27-630d89adf977", "value": 1942528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863449, "uuid": "b785c262-bd82-4287-8d26-61c68c669555", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adf1d1cb-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863586, "uuid": "aad83c12-49fd-46ba-9b87-58b32ca297bc", "comment": "Malware payload", "value": "30780e55afeb366db117c9399e4ff7fa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863586, "uuid": "858be8a8-fc86-4c45-8f46-ccb8e9ff8417", "comment": "Malware payload", "value": "e231d88898cf118dbe3fcd45a94e25dce9ae8a41d9ebf8a1bd632ebd5d38d101", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863586, "uuid": "443fc956-29fa-495d-af01-329bbb1bac08", "value": "T19A159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863586, "uuid": "f6361eee-dd15-4469-8843-379b9a35d187", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863586, "uuid": "bc7d7998-211f-4977-a9df-e4e21bbd9b71", "value": "12288:xqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgajTi:xqDEvCTbMWu7rQYlBQcBiT6rprG8a3i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863586, "uuid": "2010c464-07f8-438b-8937-f5f00893178a", "value": 922112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863586, "uuid": "8b1dc6ca-bda2-49e8-a079-1367e0366812", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df0184be-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863668, "uuid": "3315ab21-1da7-477e-bbf3-f45916241379", "comment": "Malware payload", "value": "5edde75ab6b47030a5c1349b70a23f19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863668, "uuid": "8a9ad32f-74eb-46fb-a70f-8a47bf907387", "comment": "Malware payload", "value": "940a74a13a7f1dc675da6e1666ae507a8e06b2674f501a644777e9f62721c032", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863668, "uuid": "032fc1dd-62b5-4f10-bf45-1593de7148a5", "value": "T1B503F85AF9818B12D5D5027AFA1D154E3B2317E8E3DFB2136E202B6077C796B0E36C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863668, "uuid": "78de7c0f-fc50-4f7b-9d98-b76536e850d4", "value": "768:hMn/GHm08Lh1p5NdLwtLc0FNUzfimcZ3XYIV97iaigUmUZbgrVwH:hMn/GChf5wtIMOz9ILiailmUZ3H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863668, "uuid": "82b34dac-b742-47fb-b184-bf8bdf14819d", "value": 40352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863668, "uuid": "d8890e4e-a3c8-45b4-87b5-fc92d17035a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863668, "uuid": "1a2b08d0-bbdf-4eb2-8092-22487f1ed24c", "value": "t11dc02b108635acc574ce055233520038f00acc1431fd0911e3e1460e01b75b15022a", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df282a4c-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863668, "uuid": "7074fbf3-bd00-4daf-a37d-f51bf2795c9b", "comment": "Malware payload", "value": "f9b429c5489360a3d87a25d943a72e9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863668, "uuid": "55104b99-f667-4f15-93a5-2d0d463a15f2", "comment": "Malware payload", "value": "f77b41abcbabf832ce5fbbab574f159837443dd833ac943e4c7b4e167391ee6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863668, "uuid": "c13a9ac0-01a5-4193-b51b-7100142e305c", "value": "T11613E1588B510BB1FDF459B5E2D8408C237DADF8A1C736BF27655B38A20D570582AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863668, "uuid": "5d7da214-ea40-4b50-9ee0-08acc7d808ec", "value": "768:DabxoeDnHofR4D4VOtnul1bReQxJpH5KrYKDnUmfOrLjUc8OdN23Uv:Dab+eDoOtnuVJdR8OdNz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863668, "uuid": "875893c1-8d90-4efc-9272-e828184ce3f0", "value": 45068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863668, "uuid": "6eea69e8-db3b-43ce-b68c-3bbfbff91183", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863668, "uuid": "d59e7071-7e42-4437-a785-658650483b05", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df4fe812-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "65f9e1f8-979c-493c-bda2-52c8d8b4d3b6", "comment": "Malware payload", "value": "6129900e773370082a73af63b58644c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "ec897734-6f07-4e76-9de1-763056091621", "comment": "Malware payload", "value": "d0a708082c13276d7f46d2b286da30d90ae4fe7331dd5e6ea756283f24810be7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "6ea81d51-c6a4-421a-afe4-82c9c0682dc1", "value": "T15423F1E7607D8BF2C5B7B670589A0FC2ED739A221565CB8B01D80267B84315CBD11F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "8fac9572-fa98-46e6-becc-e48783de3538", "value": "768:i0MpYJsL+JhrMJQzzcQLfUYci9FdsOME8h512PlPZGsJNY19V786mOUa33ue/Fje:tMP+mJQzzVU0dsOME8/12dEd7lLnue/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863669, "uuid": "03881d03-b9de-41dd-832f-7a8ad20bb324", "value": 48304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "ad290e40-8ac9-4c5b-8994-28d595b18b90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "4f414e95-f937-4676-a97f-8561f58b2efc", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df5ad109-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "4630f485-57f5-4d63-a6ef-b87088a108ed", "comment": "Malware payload", "value": "a26916304ba22ebcb8b93a8915183acc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "e41aff74-8bfb-4e77-933d-c6f40ae70e2e", "comment": "Malware payload", "value": "598b4c00d91895e357629c989ee7e31e9520e7b5a2140ec556efd6989d572645", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "678a2296-bd8a-42d7-bb5b-a3477145707c", "value": "T1BEC2E895F9828623C6D14276F55D4A8E3F2523D8F3DF73039A322B60379781B0E66D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "3b59bea6-8bd4-48e7-852f-1a7d8927b607", "value": "384:P+MsnxIBegLQgC2kmzx57I8HKlaeTOzaPyuPwSjxST6vy6vFMF30utsIYPE+BEep:P+jnxtg0gC2kmsQKlLdjc9/qDR6I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863669, "uuid": "97eb6d93-f2fe-44aa-af09-e982ab05dade", "value": 26928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "499e1ef8-12b8-4237-8695-dcf50c4633f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "2527b19d-5316-44ee-9a57-423fd0d9feb9", "value": "t1b111ab298d4c4d4cf940d879fa5ca252522557f93d3c281679f7c85df2774b205a1e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df5cd7ee-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "5c718089-710a-41e0-ae8c-aeb2e4ec2756", "comment": "Malware payload", "value": "e6c6b0ce43b096823990c89cad7b695d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "e7b669b6-d52f-4f5d-9df6-16b349a5a07a", "comment": "Malware payload", "value": "7e4b5e72b2d18fb833480afe66e2df4eacbf33801159b7b20bfaebe4edaf43e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "12cacca0-9f37-4497-9a98-09816f9ad6c5", "value": "T11DD2F817F58281BDC4A6C130966EBE37DC2376FD2335F16637E4A6326D9AD221E19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "b9f4ffdc-a3c1-4894-b197-0caf28659855", "value": "768:LySrVYc8FqN03lPhRTf+etdIhAaj6yv+QvH:pVYc8Fq23pBtyj6IvH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863669, "uuid": "35a3bd59-aa4a-401a-8337-f147ea0afeb8", "value": 29952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "80981ab7-5fd8-46aa-842a-bc7f67aede2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "a313d18e-96d8-45a0-a6bf-6f97ec144765", "value": "t16501adf03ca139e475e3bcb3724ed036cd3e5b7904207be0d6719cb4aa05b4404a28", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df68c704-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "9254e23d-2294-4f31-b98e-06f26fa877f4", "comment": "Malware payload", "value": "0f9d16919c0b01da5df62719d057db18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "ca118868-95c3-47bf-8ad1-c9ddc038f479", "comment": "Malware payload", "value": "a162fb3212ee720dfd7c245a2c3a936b70219938dae6ae85436bed574178f301", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "a7cfdea2-bafe-4287-b237-2871472b5399", "value": "T11FC2E795F9818A13C5D11236F55D4A8E3F2523D8B3DF73039B322B603B9782B1D66D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "36fb741e-e45c-451b-9a9b-b8d1f87794fb", "value": "384:1lsnZ3eSr0k2zJtng8uNwhG+GMuz2PMu+wEsu6P6elxsbtsIwhSBueIOC3Fx4e:1inZOSr0k205NwpmsqjZIM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863669, "uuid": "093cc183-9231-4de3-8c1a-288818b4dd11", "value": 26960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "cc0ca3e1-0d27-454f-ba2c-269812376db2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863669, "uuid": "86f8dcd1-6378-4e15-9b1f-9763512991f3", "value": "t16511ab044c5c5c5df65068b9f2dce235932792bd3d7928467afbe82dd632cf20269e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15b7c1aa-778b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863673, "uuid": "527ed86c-4a9c-49a7-bb87-2b5ea08d29a6", "comment": "Malware payload", "value": "7dd456b12214a04b943e736f10ce4323", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863673, "uuid": "5806132a-2369-4d5e-bbb7-cc3fd4ab84e1", "comment": "Malware payload", "value": "43e3a2d8d50fdc69598cd15e78c538577dc004a68921eefe1ef35793c5c39ee6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863673, "uuid": "f415f745-6698-4de2-814b-3f6ad4821528", "value": "T19F948E42E2E17C54ED225B768E3EC7E92A5DF9A1CD18B7A93214AA1F24F01F1D133B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863673, "uuid": "3a75e7af-8832-43e7-8e90-5fed22eff32d", "value": "3f8722ca559b0bb5005a556460a2361a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863673, "uuid": "8ec58fda-de45-41f2-addd-2255ccdc6538", "value": "6144:pFl8KlLz2ehruhQa6GjurQuS0Mad1fzwR0MRIW2QkuPF7:iKleecJf5uS0VBpMpV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863673, "uuid": "bb1deb3c-8e90-4f00-98bd-ec16aa1e1d5e", "value": 419840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863673, "uuid": "397264b8-9acd-4fdb-8207-4e241dad362d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "014df06a-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "1aa4c7c5-6066-4daf-8dee-a4f46fa6b9ca", "comment": "Malware payload", "value": "eea28a0a95b4acdb2e75eefff5a4f6ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "0583b508-87f1-4141-b358-3ec4f89c7ba8", "comment": "Malware payload", "value": "38a04cfbda651ae57649a6a0f3ef9fd5bc3853ac0fb2cdf002fc2e01ced9b7c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "4eee5708-46c7-468f-acb5-509ab7d79d29", "value": "T1D523026201CD2BB487F41936D1EC518CE25953E8F1E2DF69F5BE61F899C0045E22C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "d45c1752-56f0-4432-bf5b-b4f66928ada0", "value": "768:ndkROrY5wWvkLN8mIg4xKkcV6iDFMGlBY7ciabRw4R7Nj8kEQk7pZ5f6ylIHvg3n:nfLNsAk46WCGla+Fw4RhIkEQkV3f6yOw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863726, "uuid": "305d9c9d-5262-42f5-84c5-5528e1415b26", "value": 48320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "949e1bf1-a3ce-47e3-8ae5-8ce0fb5268df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "a4e745aa-9c98-404a-b49b-7574fdbee7db", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "015061e8-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "a13979bf-7bfc-4afc-936b-411df811aa60", "comment": "Malware payload", "value": "06625c5070d017b2b85ee314cd1c9284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "ebb70b14-8bcc-473e-85c8-da43130dbd0b", "comment": "Malware payload", "value": "cbd17eadc6caaf0ecf0a37b9d53d6a7caf104709a1cc7de548ce5aed8c8c3ad8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "6d3d2977-05f4-43a9-953c-ce0f2fdfda54", "value": "T15A230281F90BE57DCD744D70D2478AA1BD0AB3FCE3E7657912044E762A6208FB3E21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "7bef2151-6c82-40ce-b455-ac7ad6dc961a", "value": "768:EiCEjTNL0UJd3zIIt/N0qSlnaM0SeMW8xptNHp7C795iIex7HivOFxE3U3:xC8BYW3N0qSlnakLWGHA5AH9FxF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863726, "uuid": "88366bbe-2bc7-4160-ac99-7f78acad24c9", "value": 49828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "c33b083d-3db2-42e6-a22b-0f54eeb1ef1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "37f70ff1-e7d2-43cd-b18e-02b29f48fb07", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01616cd4-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726863726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "97f2c221-ab81-482d-924f-f0337f4d52a4", "comment": "Malware payload (Mirai)", "value": "b185b15614515fcbcd6caec13efb3e14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "cfb1e1c2-b9de-45a6-b61f-5ab363924866", "comment": "Malware payload (Mirai)", "value": "282e83f41672453454d791746f164c6c6fb499400e388c1a217c831b15aed9c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "7d8cc8a1-62ed-42a4-ade5-fd1a273320ad", "value": "T15633F17D852BD9B8F9288C3BD9E98747F6A9FE27EC41B53F0428B1F14CD491025A1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "049a8d48-e331-41b3-a3be-0136fcea2b26", "value": "1536:lO/z5JrBCOATa9AxkDh1kQ2UQAc9RmdxOBu4yt+ygFuGT:lo5qTXq/kQeT4YjuGT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863726, "uuid": "c585c267-a7cb-42e9-91bd-f781c79edd67", "value": 53888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "e20aa9ab-2082-455e-9162-7eae1699da72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "039162b7-f98e-416f-88d6-3faa9f488306", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0170a65f-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "71eacbca-9814-445c-9832-b1bafad73801", "comment": "Malware payload", "value": "2baaacca5643dec59ea49040a49fb77f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "146ca0d7-e6a8-4037-aca3-35e876600b6e", "comment": "Malware payload", "value": "0db0911e9158b4cdd1d1b6207b24b60bab5c9e650931f91ab20adcad899c0e87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "abe264b0-829e-4848-a0da-92aad0a9b89c", "value": "T1E533E2E71D8BA5B29AF84434AA0D115B71D21E7EE4F77B1D1A43C1ED3AA300B95DE3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "5697e0b7-defd-4b8a-af2b-3c0555579343", "value": "1536:a5Gakb7uOWbpPikh8uA5iZKzuEo2nH4ouMmj+TS9:a5Ob7upVPZh8puEo0xu/ms", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863726, "uuid": "8e97ecd0-9ef0-47b1-af00-f225ccbd6b34", "value": 54608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "a4a4a0b7-b638-484e-b2de-2a3df094812f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863726, "uuid": "62822a0b-421b-4f7d-be0f-5124e3100dc1", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24d27fda-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1726863785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863785, "uuid": "c5e17673-902f-401b-86e0-e6d506f3536b", "comment": "Malware payload (Mirai)", "value": "430d21e10fe623c2e87a8760c16b45ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863785, "uuid": "c65f912d-1798-4b52-9db9-e0fdd7577362", "comment": "Malware payload (Mirai)", "value": "00e05d64806e73bd05789ea9490f787bb9417b027c8e03724efb564b91e1631a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863785, "uuid": "94cd4b4b-72bd-4f2b-b429-70c71548b8d8", "value": "T1D223F1E74532D559CC35FE300B974525BDFDAC06AB024BDA804D7E6FA5FA8110834A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863785, "uuid": "a89609c8-42ae-416e-9024-cbc3c182d17b", "value": "768:pZteu0Mwls7D4isHx+aGPoFKJobqkbDbaQ9gV70H5AzvHhRv9sPJC:Tku0Xlsv4VHxSoFKJoOkb3z2V70azvLR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863785, "uuid": "4b410d2d-99bd-47eb-82fa-1f18809d5456", "value": 49076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863785, "uuid": "15a66a61-50e9-4f55-ad1b-35648fac8335", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863785, "uuid": "cfd4cb6f-73a9-4cc2-bde7-d01e99337f8d", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24dc33d3-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726863785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863785, "uuid": "ce08232d-78b0-41dd-9c44-254c23579680", "comment": "Malware payload", "value": "991739c7c17b8c65f3aa65a35cb875e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863785, "uuid": "11f70d5c-6ade-4c70-83a9-f70b8909c92e", "comment": "Malware payload", "value": "5a879552343b1e154a6eb239b564d58af99aa4e29d4ecfce20cf98445cc53adc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863785, "uuid": "401813c4-96e6-4292-9a8a-d887a16a183b", "value": "T1542302E06B4A3253867490E5DF2B4C2B7AC99631E0D6256FD9E8014C95AE0C56BFE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863785, "uuid": "845f6a5b-b15b-45d8-a84e-d87dced0176d", "value": "768:VwopBK2ylSc/TQ0GPffL9B8eEUyiQwDm2RLJd53Z/s1hsx8JUnNpIOkHb3UqU:V9by5Q04ffv8ezFQwy2R9ZghwnNcU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726863785, "uuid": "776058a7-7ae5-442c-99da-ed3868073f97", "value": 45648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863785, "uuid": "0842c438-38c2-4582-a805-73212f091a71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863785, "uuid": "5cec1157-977c-4911-aac0-d824c639b5f7", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d73fbd3f-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864085, "uuid": "9f673829-4528-4d93-813b-f5f1913b5f58", "comment": "Malware payload", "value": "4662b35626bac0671d49c83a386ee50f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864085, "uuid": "77c40588-25ab-4a22-a517-d6de1cb918a8", "comment": "Malware payload", "value": "1b7275f02c44a4c7fdf718038a19143a4514777de9ce17d5158629d01eca681c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864085, "uuid": "95e4ccd0-132b-4d9f-ace6-978fa0fa1e6b", "value": "T166933B0348615FB3C0456DB126FB59340B67BE260F4F1E9A752CAAF4474B8CEB41EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864085, "uuid": "eddd0426-0592-4ab7-900a-a6fa6668f388", "value": "1536:vghck8XcYT8z7XKDbTD1hulgkn2JxZ3CZ5h8OWI6MaRMnhR090jUeQfXm:quqvaDnulgT3I5h8OvYMhR090QeQfXm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864085, "uuid": "278bbf68-1866-45cf-8a6e-d78c5ac09440", "value": 95921, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864085, "uuid": "9b2d35fb-36a6-4de4-9807-ce01ecbb8948", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864085, "uuid": "f7cd621b-f77d-443d-a254-d837bf44c73e", "value": "t1a021e243a6b68a6c6ff3582458bc06b11592e6237250bf70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d74598fc-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864085, "uuid": "233a2119-a776-4b4f-9dba-2fcaec8f8ab1", "comment": "Malware payload", "value": "8084f415a4fa68e8e7d1cde33d7ebf2b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864085, "uuid": "9eb425e4-540d-4ec4-9031-42427babfe76", "comment": "Malware payload", "value": "af123ff01d5f7a5a659b0d3b7d7c2e1e700f9cd2d4f6f2417bbdce6e8523e3a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864085, "uuid": "51c185f3-e3cb-4a3a-ada4-33e0fe3fbe1a", "value": "T111834A829641DAB3D1931AF512AB9B150132FA3F1E1BDEA2F31C3CF08F125857265B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864085, "uuid": "7b5edf93-3e13-4768-924f-d052ac547361", "value": "1536:T4bEkXUgMcRUz1OfbIYpIOvXceEQ9E3+MKA3r5hCK4+7she0QzUzJYQ2Wk:MbTUg5UBOjINOvseE6E31H5hCw7Ue0Ql", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864085, "uuid": "527136fb-ee88-40bf-a404-3e5078debb93", "value": 87860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864085, "uuid": "0767b729-3941-4964-a5b7-2b2bf27d10c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864085, "uuid": "64b165ad-9a22-4863-9efb-b04e8ba3478b", "value": "t1c421d043aab68a6c6ff3582498bc06b11592a6237250af70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7cef5a0-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "e4be6070-fa83-406b-9d11-2ddda13f3c43", "comment": "Malware payload", "value": "d4d5fa9aa89b9866e51c7121f0e30910", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "bc5d4925-ff8b-49a9-918a-f8247f106195", "comment": "Malware payload", "value": "63bf8536d753010816253ae15ee2134c550a42eae69c3db22e08ed81a8e27818", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "317a65f9-4827-467f-80da-3834fd9c47c5", "value": "T126D3C7176B508EB3D81FDD37069A460120CDE55A16E87B6FB6B4C92CE78B84F09E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "9073d621-345c-4709-9db8-66e74033d528", "value": "1536:oVQ4LeT9nQcNp17OIkysZW1IX0FbsbmoMS+Xax5hWLLQ0U0CPF3xuhmqY1fqjBme:oV2QQkF9C5ex5hWL2PF3xemqY1fuBmvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "2330558b-21a5-4bac-9e73-95d3b67b82fa", "value": 137917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "accc0d12-c15d-411c-b8a8-d517f7f74858", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "a38d2ae0-676a-49a1-a523-725b4c7df64b", "value": "t11821e243a6b68a6c6ff3582858bc06b11592e6237250bf70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d80304e5-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "fe0cb4ec-11d1-4811-a71b-51f91767d9de", "comment": "Malware payload", "value": "4205ce6899ec5916fc5d193826a0cc7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "651d2029-e37c-46b7-a189-fd0e0ba9f1d5", "comment": "Malware payload", "value": "3f09145f0dc469806387637e557e5504c61f128f11c40f8a15548b5adf373061", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "92cf3c65-e994-4627-b065-8a5f18281086", "value": "T1A6A33B47671D0B53C25B5AF12DB733F0879AFE7116E26280A40EBFC01B72AB41626F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "7ff717c3-71f3-4e28-8a4d-6b5ecb0f47a5", "value": "3072:MVW3n5adoMzRAsc5hwVeaLkNUZ09DRDWQfgm:MVbdoMF/c5hwV3kNUZ09DRDWQfgm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "e55233a2-6771-451d-ae9f-371d6d329425", "value": 104108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "70714ada-09f8-47b1-8952-bba22ee40261", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "49b34f3d-0249-46a3-b67e-e71d22068c9c", "value": "t1d721e243aab68a2c6ff3582858bc46b11592e6237250bf70ef5ec1909d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8088a2c-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "cab78bc9-7f06-4189-b68e-878c05f4cf58", "comment": "Malware payload", "value": "0d1c1f6b56e008ed18bf47534aae64c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "4219ccad-0b95-455c-8a7b-216f187f8b0a", "comment": "Malware payload", "value": "3cc253c9b37c5ff74a573f97799ee34d785718226e164cba2d7e56143fa83b95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "44a27473-ffbd-438e-a046-7719aaac534c", "value": "T15BA36C1B6241C5FBC08756B62BDFA6615823F83A0B33710673D9BCA83F258C95D6E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "f767b76d-912a-44cd-8ee4-07d1c3cb213c", "value": "3072:4N2nTlqWoerOuqoYyhADXr5Sr9phaijsTmHyVQX5A+u+cm:dcyhQSphaijQmHyVQX5A+u+cm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "41d840bb-9465-4039-8824-f6d8d6a9b81b", "value": 102934, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "e16fe45b-4212-4ae5-8002-f0304b4c6156", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "95bd36fc-f0f2-4b49-a107-c93b076fb6cb", "value": "t1c421d043aab68a6c6ff3582498bc06b11592a6237250af70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8125948-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "714c490d-8293-4930-a043-42d8c1b73031", "comment": "Malware payload", "value": "8bfd063ceca966efb144c4c116d6107c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "aafe9a89-75ec-45aa-a898-a7d15c3faa21", "comment": "Malware payload", "value": "ad995ffbf2d58f119cc6d74c16eb4ce8ab548fefa4531acf833debda21ed3dad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "50469a0d-f3b2-4a36-afad-7ef46d6c0918", "value": "T146B30805F9404B23C6D26BBBF79B438D77366658ABD7330196297EF02BC17982E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "3e3f9d54-34ed-4317-b118-47bdc4d59525", "value": "3072:VqDUOulvQ+nozmrCEJ0gtcbWJ5h8CbH58bDoeCRl7YHQQ/hVOmAD3m:JJ0fWJ5h8CbHH7YHQQ/hVOmAD3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "1bd43aa3-a1c3-47ff-afad-08372cfd1088", "value": 116040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "1438a87c-90c0-487e-9346-4cc43beb3d44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "70cecb15-08b6-4bb0-b13d-6266b8b861ca", "value": "t15f21e243a6b68a6c6ff3582858bc06b11592e6237250bf70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8174db5-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "3702955e-8bd7-4d8b-9504-c770750244d6", "comment": "Malware payload", "value": "d94055a422e9ed5478cd626ecc7a75e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "214251b8-f74d-400c-a8b3-9d0a39a08427", "comment": "Malware payload", "value": "3c2e43d07419b904e590ae901554a18bc79ae6a8bebbb32f7f966f3583ac1a75", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "5219228d-6fd3-4e76-8c19-7df247c37e84", "value": "T107B30901FC404B27C7D267BBF79A438D77366658ABD7331266296EF02BC17982E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "5ef00779-4739-4411-80a3-10dfd78d7d13", "value": "3072:pqDUOulvQ+nozmuCoJraQSZk05h8jbOwSfTll7HoDQHDVpZAlvm:eJrke05h8jbe7HoDQHDVpZAlvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "ba22d9bb-5287-4748-804a-cd185cf922f7", "value": 109446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "e61c8226-ceef-4d90-85d7-5ecf212858a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "34aae9cd-0630-4671-bcb1-902e59c35a63", "value": "t15f21e243a6b68a6c6ff3582858bc06b11592e6237250bf70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8290dfd-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "147fe29b-6cde-4e85-95f9-dca65bbcacb9", "comment": "Malware payload", "value": "1736f2e7406fa9121b7c48289f8f899a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "c5ff2941-7949-49ed-8c3a-69ec552a4f8e", "comment": "Malware payload", "value": "630aab4f7540b45a7547b70689390cf33faa47ed590890f6dbb7985ff4d7f424", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "e156619d-3cdc-4e18-b211-bef5fc989974", "value": "T157B31993F801DEA2F40EAA7605D74721B630FB760F431A7263573966AE362D53827F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "319eee85-0e64-4c55-b2df-cb8a407640e3", "value": "3072:lK+DjGICKW59bQvyceTJ3V+fDhmFZ09DRAoQfgm:lK+3GICK60ycsJ3VKDhmFZ09DRAoQfgm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "492df7d5-c8af-40f5-9bfe-5806cc477033", "value": 109317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "92418b54-1028-4c95-9063-2d1b6cf6495e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "44515e7f-c9ea-44cc-bda2-a8517357b89e", "value": "t15f21e243a6b68a6c6ff3582858bc06b11592e6237250bf70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d833c78a-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "2446bc7b-0d7c-453b-a12e-688f0c50bea4", "comment": "Malware payload", "value": "a256baf1201d582a95273adbedc4b671", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "3061219c-a9be-464e-b74a-96985620c158", "comment": "Malware payload", "value": "da2ea7914989002f545ab9721e13fdbea9086011ecc2356995a31c164bcc07ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "d83d7177-319e-40d1-ba7d-a803e2cb1300", "value": "T1DFD32905D9408B23C6D2277AF7AF528E73236BA897DB331256286EF42FC179D1E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "f2c87bd6-0089-49a9-a11f-3ac59c17f385", "value": "3072:RmfdWmd6pUeQKbsPSoalymWA2PKjWmg45hATqLm8umy/QsYJ0Yj/:Yaoalymym75hATq4my/QsYJ0Yj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "e8ce1f7e-9f1f-4f7b-a7cc-d886960c893d", "value": 130434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "338c4970-089a-4041-a353-35138342ca50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "693fcee3-c47f-4124-9047-38eb7052ecbc", "value": "t1a421e203e9b68a2c6ff759249c7c07b1115196237250bf70af5dc1809937002b475d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d836e911-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "3b9ddcd4-a6c2-4671-b93d-72b94c0b2326", "comment": "Malware payload", "value": "e5d3f177e385ab92ad87ce3f95246fc2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "bd3fbb0e-8f6c-4c3b-948b-ce31532796c2", "comment": "Malware payload", "value": "4bb5099382a5b97e15b3ed6c80305d7a0b4674c5e3b42ac3af1cacf7dbb4d2b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "5ca0ff8b-4e20-4ccc-b409-0481adb783c9", "value": "T1BDD3B76A7E11AFFEE268863007F75F70939525932AA19381F26CDB085F7128D1C5F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "42e0410a-d651-4efe-806c-85e98892b99a", "value": "3072:fflT32yc4c7nx1qs8RvduSXekkBXCqd2ES2vuYlPrKnJ175hW8xxxx84r/tzYiFy:lKzK/75hW8xxxx84rSiF3xemqY1fuBme", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "d19f1edc-442d-4a8c-bd39-c87fb005ab1c", "value": 137917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "40173623-df2d-4e06-b945-5e8bc67ba940", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "62d532e2-e2cd-4415-a870-074113400ac9", "value": "t11821e243a6b68a6c6ff3582858bc06b11592e6237250bf70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8399c64-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "b0bdd93c-041e-4155-af6c-a683f02e2a46", "comment": "Malware payload", "value": "8f68415d0868fab6981c03b9ec5d2483", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "28730c43-5720-4991-b1d6-7bf3fbc34af2", "comment": "Malware payload", "value": "143ada5105935ea45cd490b409f823f07d01c802de32f1f94455599ac3093525", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "4cd9bff4-a87a-41f0-9a47-abb89f0b7695", "value": "T15B932B86E642CAF3C4430AF5029FAA590732FE2A4E3B8EA6F71D7DF49B115C432157", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "61151d29-283f-4cca-93b7-0267a7d9a34b", "value": "1536:2XwWc3fJOB/R4twwKWwCwyIZWDq1S3u8d5hhKP4JseWshe0QzUzJYQ2Wk:QcsB/R4tTdwyIZWDq1jS5hhKAWUe0QzR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864086, "uuid": "8032b373-88c9-408e-ab87-ce7e4e6864e8", "value": 91540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "414e40cf-35f5-4cab-a38c-46afc8071206", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864086, "uuid": "27663602-0585-4515-8264-c9aa51ddb20d", "value": "t1c421d043aab68a6c6ff3582498bc06b11592a6237250af70ef5ec1809d37002b475e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fadcef05-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726864144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864144, "uuid": "c6d3cf2e-be48-451f-8005-c973a6e0e721", "comment": "Malware payload", "value": "619d02125183344443bfc7662feca40a", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864144, "uuid": "8f696e83-6c86-4b68-b375-c73bbfbe9730", "comment": "Malware payload", "value": "617bbd444d2bf6fbaf35e9c1b208cc83e29384f21850c4a72b0643ba5f019ef5", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864144, "uuid": "efb0fd58-b51f-48e8-adbf-a5c67f996da8", "value": "T1F5314CABD5954EBD7F64B81775A4080474E1E6EB18DF9F2BADD838D4048CE4C34C2A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864144, "uuid": "e471bfb3-507d-412e-b586-8783148a4363", "value": "48:1shsjZsN7shs6HKh5sNsyUsts9Ds6sysRswsss6I32d:10wQ7MVHKh5AzUA+DV1ofrVI32d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726864144, "uuid": "65d6fa47-5f6d-4612-ba20-655ec2949636", "value": 1693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864144, "uuid": "a65bac65-9f8c-47e5-97e0-9a6e6da5d3ed", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "141dcc63-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "0c26e07c-0856-42ab-9ba9-4c0477645596", "comment": "Malware payload", "value": "f8e94234eebfeb9b5d70cbe9f0603b02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "52afe0cd-e508-4522-ab01-5b7ffc012582", "comment": "Malware payload", "value": "da1bb01b01c0cc5174f00bf848913976c87fe649944841a67126437560479b97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "6cc4eb15-49f6-498e-ae02-99d3b23b3a7f", "value": "T11AC34A2777260A23C0E6543541E75333BBBAC7D529B05207B6A09EEC3F1A6D03963B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "25aea699-2fc2-4ef9-9dbb-d888f8cecf66", "value": "3072:EOqwW3NEI4VvLfphaH9HcIqmPwAw85YIn:tq/qvLfphaH9HBqmPwAw8CIn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865046, "uuid": "2674adb7-f415-4dbf-8ebf-476af8bc75e0", "value": 127170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "743331a8-c99a-4823-91ef-2975950f83af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "7ec7ac29-3077-4e29-89fe-f4dcfa91bc2c", "value": "t12f112113a0b9ca286bf758349dbc4bf105512b237742be71bf0ac5c49937042b979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "142403d8-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "48751272-3597-4342-9846-39e51dcd47b2", "comment": "Malware payload", "value": "2924fbdbd8021040b7e0afd6c294a835", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "7d9fa567-1e50-457d-b67c-cedd2ac39436", "comment": "Malware payload", "value": "b79edb634568064b92979ebd843bde7b680b233fd55e417249f127ef839e0399", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "55823d43-1f76-4461-ad7c-40daa861df89", "value": "T1CFE3D96B7961EBFAD05DC2310BF7AF6096A521E217D09345F2ACDB185E2034E1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "cc09f472-205e-4ba7-8225-53b9587bf96a", "value": "3072:sGGNZfCos2pA4FCs5hvikTam0/5ApYADn:hACyK40s5hvi9m0/5ASADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865046, "uuid": "0b7aac98-4918-4151-ad1f-a606c4dcb586", "value": 144442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "d46a5b0d-4593-4b7d-a00e-76a8228108ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "7120d6dd-e101-4a3c-b3ff-449b82c94e22", "value": "t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1430be36-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "c78ce3ce-5291-40b7-9fbc-cafc5532506f", "comment": "Malware payload", "value": "c97aa7733dfc6e4117e949a7aad9402c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "1a375f83-9dd0-4c30-86af-2ecf85e74d23", "comment": "Malware payload", "value": "bd5606084367a3cc3b0c1dee360b2495796c7dd7bab3c75f791e22cc0ea2e0fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "6792246d-3faa-4702-af0c-f8fca86ab97a", "value": "T169B35C07DA21807AC09B43B21BDF96218D23B4FD1772310B33E5AEE4AF095859F9D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "f03047e9-c09e-4ddd-b3f0-1875ab75708b", "value": "3072:j6dye4BmJQHphaZw/1vc4+AzkSXmdRWaLHgb4:dHphaZchrmdRWaDgb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865046, "uuid": "1348514f-5810-4096-8796-955b090e627d", "value": 108630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "bf948ed7-0399-4756-b33b-5e1ff774d825", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "7c3e469b-8d7f-4066-afdc-627dd85d4cd7", "value": "t1f111c213a0b9ca286bf758249dbc47f105511b237746be71bf09c5c49537002a979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "144e67cb-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "8c36392b-822a-4f8c-8eeb-56d2ca146cc3", "comment": "Malware payload", "value": "5126457dccd313552516d7fedc8f95e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "cd502cf7-cd5d-4c48-b8b7-ebdd681fa39c", "comment": "Malware payload", "value": "cd2b50a9d359ed79773dd453ed60b41338a5a688a6047df7eb3aad59905d2823", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "4ffb0484-fb26-4325-86f5-4b0f7b21ef3c", "value": "T13BE34C09F7408B57C0D22776B6DF524633239BA9A3DB33069524AFF43FC27A94E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "9b4c54eb-979e-4b21-999d-7041b068df51", "value": "3072:Tdbmn8aAEHqgSkano1DTAi5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTP5hWTGZWYxVldmpwTsLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865046, "uuid": "57b38e74-34c5-497b-bdbd-ee800e8288a2", "value": 154520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "86ca95d7-d26a-4f5f-8e0d-8baa6bf0317f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "112a195b-bc43-470e-b65d-09962f211aab", "value": "t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1458c641-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "b3e93261-320e-4332-970e-32d1d00ed70e", "comment": "Malware payload", "value": "e1c9ddf02589c4cc6af3f2363627ec89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "8073bebb-eaa3-4553-b9f3-b444a727a712", "comment": "Malware payload", "value": "f652b2744f83ba914ba29173cb78093d4d4aabaaf7e29c28700c558b45ea4e9c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "56c0ef0c-f8e0-4884-979c-746b6e775c17", "value": "T146B34C03A3190F43D5CB49B02DEB27F143AAE9E112B36182A61FAF9457B37791153F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "bfefb411-67eb-44ca-8ed7-e2df5f81bedd", "value": "3072:gQiBqcL95J6qEWLE3SZ5h7wLYm7ArEfT3n:gQiBClWL15hkEm7ArEfT3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865046, "uuid": "7fd1b29d-abb4-4e8f-8c5c-22b5eceac471", "value": 108983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "46645368-1ac9-4827-98d3-b9e6790b84f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "77b8a170-4835-4e3e-9358-dfdbc6b36b00", "value": "t11811e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "146cbaa2-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "782d7e62-ca0f-4e70-aee8-987b3a47aebd", "comment": "Malware payload", "value": "96027b8d0156a123b5927715386fd882", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "0ce6c7ac-7084-4111-bb6a-34ec17f22980", "comment": "Malware payload", "value": "8bc0bd64fe3df16e3ff62c9bc6699bd7eb715221e92aa6424c4cb2a8c5763f7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "f02df4f9-43a1-4a97-9722-6ea98e263b1c", "value": "T13CE34C09F6408B57C0D22776B6CF524633239BA9A3DB33069534AFF43FC27A94E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "25781106-cbd4-49a4-bd12-4622dff73f86", "value": "3072:Tdbmn8aAEHqgSkano1DTAi5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTP5hWTGU2WV7ldmpwTsLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865046, "uuid": "e6f9c91c-104c-413a-a77e-14cc685c73d8", "value": 154520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "30c7de69-ac18-4a87-9c83-c0c8822d7473", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "86cf7ae4-0bb4-4c5d-a866-3d4ecc54808d", "value": "t157110e13a0b9ca282bf348249dbc07f005502b23a782be71bf0ac5c49437002a875d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1475abee-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "65d4ba58-253f-408c-953f-e3a4e2176116", "comment": "Malware payload", "value": "1ef78881f4ec40a49f3b9950a380c04a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "ea2bdea2-0c99-4dc2-ab33-cbaf2a2cef89", "comment": "Malware payload", "value": "72f60f97c129631c47f8e15e5aebb5f6220ca7d7c5d415ff0b188ab46b3c6e82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "c86e5fe7-bdf9-46be-8668-b833a63b8192", "value": "T1A3B32849F5048653C1D32B7ABB8B434A37226AE597DB33155638BFF03FC269A1D369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "9d104dcb-e506-4c9b-8b99-87913b7759b2", "value": "3072:vhfviOui5FCRSUaVejY68t35hqSr3hGm0Qxu1bXWIn:pvfUQVejYXt35hqSr3hGm0Qxu1rWIn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865046, "uuid": "f134556b-c3e8-47ed-a16c-438e2175d4a4", "value": 115077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "9d15b8bf-1cb1-4bc3-81dd-1a93f5fa3099", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865046, "uuid": "07a14e29-b358-4c9d-9724-1dd633183406", "value": "t18811ce13a0baca286bf758249dbc47f105912b23b746be71bf0ac6c49537002a975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38191d78-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865106, "uuid": "db483fd4-f9c1-4a93-b869-af0ed8a76209", "comment": "Malware payload", "value": "4deec448bef0c5579ab85e78a47466af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865106, "uuid": "1b8c978f-26a5-409a-a658-52c3b3c241e4", "comment": "Malware payload", "value": "53754536ff4ac5c0124c6c89398b3ef6ddaf8a8ab413aec03ed0c5caaf66ca54", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865106, "uuid": "73681039-876d-4337-a57d-1fd62fe75881", "value": "T113E3F907EB614DB7C84FCE3202D68525148EA5A653D56FABB278CB5CFB0798B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865106, "uuid": "8c228804-929a-413e-a3f2-f88ac68de871", "value": "3072:lBXpqf9VHGn7vsU5htpRvHpVFm0/5ApYADn:llp4WvsU5htvp7m0/5ASADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865106, "uuid": "35552c97-cc0c-4965-bb39-2e694657f513", "value": 144442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865106, "uuid": "45ee23fb-696b-4370-ab63-9e165b77ea36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865106, "uuid": "505a8ad8-58d7-40da-b375-c2ffc6438339", "value": "t1ad11e113a0b9ca286bf758349dbc47f105512b23b746be71bf0ac5c49537002b975d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "382199eb-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726865106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865106, "uuid": "db602bd3-a2de-4156-8eb8-36053c9c4f07", "comment": "Malware payload", "value": "54905297b9b544b1d9e26950936127af", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865106, "uuid": "06c59125-2232-46c6-905f-afcc41bc3a5d", "comment": "Malware payload", "value": "c280acd5aa306231ac5ca72cc028068497b8fb416819d0878b30f1318bbe1ec4", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865106, "uuid": "bbdeeb1f-5bcb-4021-956c-910e91704216", "value": "T110314F8E217216357C66A8EEB1B9454C31E4D3A884A6DF08ACDF3FE4718CD147460E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865106, "uuid": "0c92aa20-0d71-4792-a319-9a2082d38658", "value": "12:GHBvGpzZSuVYanacaJvtrPML8/QSaMapaS2NITnd4Klq:xLVY49W1U8o+NIrSKk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865106, "uuid": "bc81b340-329e-4c2f-9538-40e695ef9280", "value": 1756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865106, "uuid": "cd041779-0c50-4620-97bc-5a8a84982217", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49ccd105-7793-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1726865995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865995, "uuid": "64cd8cf7-e03c-47bf-8aa0-01af4e76a93e", "comment": "Malware payload (GCleaner)", "value": "41287d2b071411d680e24fa42cfce532", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865995, "uuid": "37b7f43b-0514-43ad-b035-32ca3bcb7316", "comment": "Malware payload (GCleaner)", "value": "b15d3ec119e349d04dac48acf1ef1701d90bf4f4a7bb8013f242f644281264c8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865995, "uuid": "94bcc8ba-84cb-4eba-b9f3-c306f72cf632", "value": "T1B8947E42E2E17C51ED225B358E3EC7E93A1DF9A1CE19B7A93214AA1F24F01B1D173B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865995, "uuid": "6c73f672-8212-4c56-8834-21a171a32636", "value": "3f8722ca559b0bb5005a556460a2361a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865995, "uuid": "093075d8-2825-476c-ae94-fdc3007ec056", "value": "6144:IFlVKwLzh4VYLPXBGbu49DjfUmmdJDS6MnNDprS58gkuPF7:kKw54kob7Umm/S6ONdrSegV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726865995, "uuid": "108120cd-b95c-4891-b253-e3fc5ddf01e9", "value": 419840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865995, "uuid": "8d25da1d-7cbc-45f3-a451-15f3ef106108", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02f9d900-7794-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726866306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866306, "uuid": "642489f8-5bfc-4f58-838e-fb9f21eccd2f", "comment": "Malware payload", "value": "32b1a1b3040c99f5f792e85624e78d03", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866306, "uuid": "64d6170b-8ec8-413e-87d7-9322ac44e76f", "comment": "Malware payload", "value": "8fd6e4ff8704365f1f74dc096cc040ede251d0f4d26034ddbdf74d00661b8b9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866306, "uuid": "a89aa62a-1781-43df-a452-181d32cb697b", "value": "T19364963A7A21EB7FE268863107F79B70879A21D227D1D741E2ACC7181F7028D585FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866306, "uuid": "f261038b-6bf9-468a-80cf-a699eb3ffb41", "value": "6144:oQrLbG9sTJJXs3ZxbdRFXMmurEccVFmAjNFEP:fybd8murEccVFmAjNFEP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726866306, "uuid": "51eb7f1e-7e02-45f3-9bfe-bd87f77dec37", "value": 311261, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866306, "uuid": "efc61941-cbf5-4c3c-baea-8dec99854292", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866306, "uuid": "edcbc96e-6894-4e05-a69f-974aedf4ec48", "value": "t1d0b151a4943c01c8eea39c69ac6c6fe30157e6192395ae26ff21dddc085e4a8f524d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5888d420-7795-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726866879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866879, "uuid": "ee1600c9-9f1f-45dc-b659-36e52442e55f", "comment": "Malware payload", "value": "c6677ec4b572772d7b7c2b7cd8c1de16", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866879, "uuid": "0c2eff9d-a072-4863-b0a0-3a624c5c3f96", "comment": "Malware payload", "value": "185ac745d7267b6f001fb42c3bb724891b1557cbd7d8076d2ac8cbce72b2b8ba", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866879, "uuid": "1a1a590c-3a3b-4e99-a08e-15c35f1280f4", "value": "T1D4947D42E2A17CC4FD225B358E3ED7E93E1DF5A1CD19F7A92218A91F24F01B1D162B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866879, "uuid": "6d9c4b0f-8d0c-49f3-8433-c7dc6a85a50c", "value": "3f8722ca559b0bb5005a556460a2361a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866879, "uuid": "eefc97e8-d211-44d2-ac0a-41d3dfe71d41", "value": "6144:hFlhKaLzHXYwOnVObxrbyQEa2wN/QCK3Rt/U3ELkuPF7:fKavXYwOVOb91V4tcyV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726866879, "uuid": "e6f3289c-daa6-4b13-b550-fa4abe936d1c", "value": 418816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866879, "uuid": "138a316e-67b4-422a-876a-dff244e6b182", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a951a7c8-7795-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726867014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867014, "uuid": "01921ea7-c6f8-4ea5-9312-b22078f01930", "comment": "Malware payload", "value": "eaea249d30a8871d042df4798f1f6e50", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867014, "uuid": "0420265d-d397-4a7d-8c1b-88251bd479bf", "comment": "Malware payload", "value": "2da1e8bf03c5a80048834e56af5cf384e87986b5b2e59d6acb436d9df20d0203", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867014, "uuid": "e9f5342d-d8cf-455c-b8e1-13da55ec1bd6", "value": "T1C0D52951F90976CBE98B13785527CDC268AD02B98F1548C3A87CA4F9BFB3DC116B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867014, "uuid": "1102b5e5-cb04-4903-8044-c49e4a0f6e15", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867014, "uuid": "6dcddbbf-e393-46fb-8117-35b7a77332ce", "value": "24576:c2TiEVewM+3pDmZZNg1WHhAhnY7XI2Yqryn7qHigLrFYWuBkiCSHVI8FVCxEdbF+:nS+3pDf13SDIhgLryVI83bZ/j1Cx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726867014, "uuid": "76df6014-f77f-47d8-96e9-701ff8c385da", "value": 2819072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867014, "uuid": "52bbedd8-ca72-40a8-8c91-2a8823b2413d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b02968c2-7795-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726867026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867026, "uuid": "8395d6e5-0464-4f84-9765-5045d741fe3c", "comment": "Malware payload", "value": "a463e516041f4bc84f03bc8fe2b643dd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867026, "uuid": "cb7d25bc-492e-4c79-a371-159406f270a8", "comment": "Malware payload", "value": "68024ebc8676feb8c4b480f5042a8fe8f108a88fc20fc6dbfc3cf92707f148b8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867026, "uuid": "8ab0ba20-bcab-403f-8b69-c3a75dd1df3d", "value": "T1829423B156709E22EA94473179A2AA09FF60E1924F6344ED356FD2324DD12013BFB6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867026, "uuid": "5c07fb4e-8340-4466-9e03-45a0f8e9055b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867026, "uuid": "ed10f9d1-eedb-4cda-9d3d-35f01438e4fe", "value": "6144:ruFHcG6dc0A3+yfikluZRt6wfSYZc6pNLuvFJzPmhsiqvK5XEHAkgDkJEO:rCL3+YllubttfS16pNuTUqi1EE2EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726867026, "uuid": "83384f8f-78d3-4477-a651-6e05745ae9b0", "value": 423328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867026, "uuid": "97c6810c-41d1-4483-a33e-5efc72e9420a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b396f10-7797-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726867715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867715, "uuid": "cc85eb36-c3d1-47c8-bfe0-5016b862f793", "comment": "Malware payload", "value": "fd159a146f1eb868f3a4cfcd0cbbe173", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867715, "uuid": "a73cf948-0ede-4255-8993-fe0ee999c39e", "comment": "Malware payload", "value": "821359cb2208543afaef13093096e6ccb38a7012741265c3a7c01e239c468538", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867715, "uuid": "ab8817a2-f782-4d7d-bcd7-7f77261d64d1", "value": "T12824CEB0FC98FB636099480FCD614591BCA672FF53CE19E68DC7109B6099AC7393AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867715, "uuid": "b005661c-3113-4209-90ba-4330aa0a8ed7", "value": "6144:LgYTx0Gkz9YMsQNwRznCBJOHMYIgRjz+NqU:LpN0x9YMpSRE6MY5/+j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726867715, "uuid": "c8578964-49bc-4921-865f-20c3968f7f2d", "value": 223322, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867715, "uuid": "f95cca24-0ea2-4861-aa33-02c634c9c67e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0110d24-7798-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726868368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868368, "uuid": "f3a5372c-359e-43b4-bdf1-18c2c3471ea3", "comment": "Malware payload", "value": "47d19ea1a7628619ea9b266abaf5ec3b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868368, "uuid": "511f06dd-2488-43c9-9c04-f2f2fb318163", "comment": "Malware payload", "value": "0653b5b4366ac9efdb5f974f67e1e9f527884455874843176089175bfe431143", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868368, "uuid": "95e05519-88e2-41af-bd65-50b915ecef96", "value": "T1DDE3390AB5C190FDC5EAC1744FEEB13A9972F41C1224B21F37D8BB621E4DE215B6DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868368, "uuid": "436ba2e7-595e-4d8e-a390-631b29941a1f", "value": "3072:mwtRgVROKRr4NG8mfpD1WMsBAqseMHShZaEyWFZy9Td:DLgV8KPTXWcPHYC3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726868368, "uuid": "26c7e09c-ae44-4324-bc15-874703e00d27", "value": 155752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868368, "uuid": "d0db87a8-3ca8-44e9-b79d-87821945374e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868368, "uuid": "350d86eb-da5b-47f0-a637-2701cf475a26", "value": "t11751a9353d963984b1e7f72ab34ed965ac320a2209e270e19b336ce5cf427840db20", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14d54743-779a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726868912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868912, "uuid": "cb66ae2d-3026-4178-9b7a-c26685c8f5c4", "comment": "Malware payload", "value": "2e120baab202875c575a6b60d1b64ffc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868912, "uuid": "30778a26-7b85-44ea-bace-9480bc4411d9", "comment": "Malware payload", "value": "2cd4c4f0550866c1ddcfb87c4a17574765c4fdbb7320e2c2c4cf053db51b8c6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868912, "uuid": "5d805a04-21d6-4d62-a1e8-0c68f81d6e75", "value": "T1C2355B6BF2A374ADC153C13407DBDBB2A939F07801126D7B328199393D16EA05F1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868912, "uuid": "adf0cb0f-ecc1-43d1-8352-399f41486dfa", "value": "12288:603nInpbicgrfX3Vw4P42R6Xogg0WgeajoZRUa8RlLzy:603nIpbiFXFw4T6XfWjlOa2l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726868912, "uuid": "2ca70f5b-787d-4deb-9b70-e62335b0b0cd", "value": 1067383, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868912, "uuid": "8ad0d75f-1c77-4183-94a0-36886fe6398a", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868912, "uuid": "3b1436bd-a17a-4ef0-846b-7604889205a1", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49e4c589-779a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726869002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869002, "uuid": "6e6e2a65-563b-429a-8b80-919b541f053b", "comment": "Malware payload", "value": "8fb3610c4ba81a5a93666562e712740a", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869002, "uuid": "b4784a8e-6522-47ec-8adb-117845bccc1c", "comment": "Malware payload", "value": "8f72e50fac72d3c5880f79997f6cf38026b00d6f907bcd80c5d780cf92db7158", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869002, "uuid": "c302579f-7019-4256-bee6-53d49499ce38", "value": "T1EE66183B9B4341CAC12FB57ADC927F3FF8286ADC4319492B6C0548BCA755791A8AD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869002, "uuid": "9022415e-d50c-4a48-b37d-eb438745a766", "value": "92a00f4d0a4448266e9c638fdb1341b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869002, "uuid": "d1fa336e-0446-4cc1-b43d-e3ec9a656751", "value": "98304:AX+ACpyT3Q0Izx583ES5vXJY/IR7puRQ4Y4AOgtly:gBCpyTgvzL8UScWuRLY43Cly", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726869002, "uuid": "8f1722e3-1391-4e5c-8dc6-e7fa63ac1e2b", "value": 6666862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869002, "uuid": "ba47555f-8ee1-4d99-a322-7f9b318cb0ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7051f8ea-779a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726869066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869066, "uuid": "4e4f40de-2e66-4649-b4ba-baf294d55817", "comment": "Malware payload", "value": "f9607a414c82ab166cf40801b17fa452", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869066, "uuid": "fc36bf49-1559-4e9f-b1e2-831b59352cf4", "comment": "Malware payload", "value": "6bb68ea17f749140449ae92e14e196e393abaeeae2db4b827414cefdaebe6704", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869066, "uuid": "96b170da-a457-4f2d-a18b-c7a46464d37d", "value": "T1A99423E12B298810EE5F0B719943D335EEA2FD7665E0DBA5270EE170A40E35B1EF13", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869066, "uuid": "4acb9dad-c565-47d9-b734-3fb5fdf85a8c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869066, "uuid": "b6489914-042b-4861-81c9-ea2a7612e5c0", "value": "6144:PGMJZepx7fmS/7iBmaZIp7lxnFMHwoVuxIcjqedeNxLzW30MC/A+raDHWoWEO:PAt/+BmQIJWHqxIcjRdqzyeXraDcEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726869066, "uuid": "5f84324c-6e33-4786-9851-dfb1d700669d", "value": 423328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869066, "uuid": "3b6f6f4f-e025-419a-a7c2-f3a6819c036f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84cb47b3-779b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726869530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869530, "uuid": "2f2a6ba6-0ded-404a-8a8e-dff609872823", "comment": "Malware payload", "value": "5ed9ef96dfb2063d34c97209a746e62b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869530, "uuid": "fce8c909-13c0-4b14-97dc-d46b55acaa59", "comment": "Malware payload", "value": "d3dc98808b0f616c46cb06f3f5459b744fb8ce1fb4ca4866313c0e63dce2dfdc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869530, "uuid": "f9568feb-911e-43fe-bcaa-e3cb295e55e3", "value": "T15A95332AFF7B914CC52A5B35CBAD4658393E396C989CF70421953EE578831330D93B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869530, "uuid": "10db0da0-d2a7-46a4-859e-ff899a24a6ae", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869530, "uuid": "23fda789-98e4-472b-b6ba-06a2cc91043e", "value": "49152:yyKVJax0CtL5bkWGjrQEwJze3Iqfxbb6YJ:yxmo/3IqJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726869530, "uuid": "fc476254-5b8e-4026-8539-892a107440a8", "value": 1907712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869530, "uuid": "6179092b-94ad-49d1-9223-bb7ca6614372", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a970758-779b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726869540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869540, "uuid": "32e53667-ef11-4316-be56-8387e5bd4102", "comment": "Malware payload", "value": "9c8ffbb23cbdf488291ea648f88d5acd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869540, "uuid": "88952e96-c2f5-4b49-b8d1-76d735324273", "comment": "Malware payload", "value": "7b411a88e164e83a5cf07b042082e851da2bd607896ab1270fec8700bb4b81e5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869540, "uuid": "0738e801-d4e5-41b9-9a65-ba5dcaced80e", "value": "T14D947E42E2E17C44FD225B369E3EC7E97E1DF9A1CE55B7A92608A91F24B01B1C123F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869540, "uuid": "66b4910a-02af-4b90-8ca6-21a03ce16c5d", "value": "3f8722ca559b0bb5005a556460a2361a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869540, "uuid": "4a75d774-f852-46bb-b01a-13168fb05979", "value": "6144:IFl7K6Lz3X+i2On4BNUWURZgIRz0vOUP7vkuPF7:qK6/X+Fm4rW0vOUPzV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726869540, "uuid": "ec2cc873-4edc-4251-9f4d-578050e89f8a", "value": 420864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869540, "uuid": "d05c22e2-3423-4123-9697-0d79b4db4a1e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a878d39-779d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726870627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870627, "uuid": "438208fa-1a25-4a9d-842a-d6e678387691", "comment": "Malware payload", "value": "b9134d2ca1cb72f262c362ba304b0d07", "object_relation": "md5", "Tag": [ { "name": "bazaloader", "colour": "#472954", "exportable": true, "hide_tag": false }, { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false }, { "name": "Latrodectus", "colour": "#ba6b84", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870627, "uuid": "0f7b8aa3-de1b-4129-a042-17fde1f5e4de", "comment": "Malware payload", "value": "c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7", "object_relation": "sha256", "Tag": [ { "name": "bazaloader", "colour": "#472954", "exportable": true, "hide_tag": false }, { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false }, { "name": "Latrodectus", "colour": "#ba6b84", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870627, "uuid": "811ee5b1-3294-4aca-8393-648e696c6da6", "value": "T13775D0227386C537C96E01303A29D6AB5579FCB74B3140DBA3C82D2E9E745C16639F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870627, "uuid": "ea963a52-237c-4c4a-bbc0-df20a16e4689", "value": "49152:xv53YhW8zBQSc0ZnSKBZKumZr7ALFUSNH9:3YY0Zn3K/ALq+H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726870627, "uuid": "63f3c95f-400a-4bd8-bbab-d34ce914f36c", "value": 1682432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870627, "uuid": "66887436-088c-44c3-b95e-88efee222762", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b91825b-779f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726871326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871326, "uuid": "bf074233-af3b-48f2-bf3a-50e5503bce50", "comment": "Malware payload", "value": "2d4b25a200613cc4993c1063302b9d3c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871326, "uuid": "0842bddb-a968-4199-afea-0ba097c568fd", "comment": "Malware payload", "value": "373ee523aa0bf13af4fb0d674d961b628ee21f25ec66b721bb89058157496810", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871326, "uuid": "96610b52-dcb8-48aa-a2ee-19a5de8e4cbe", "value": "T1BF159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871326, "uuid": "093c0b8f-91ad-4e25-b445-8abf2e4748ed", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871326, "uuid": "bca662b9-9877-421f-b5a4-25f888e5830c", "value": "12288:fqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaUT6:fqDEvCTbMWu7rQYlBQcBiT6rprG8a06", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726871326, "uuid": "da47e0f4-1ef9-496d-9aef-a36c3d772cc3", "value": 922112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871326, "uuid": "5722ac58-6292-45ac-b311-042736c752eb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10a8f990-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1726871885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871885, "uuid": "ca838177-e9e1-45c2-8b8e-d7061cef75ff", "comment": "Malware payload", "value": "a37ee36b536409056a86f50e67777dd7", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871885, "uuid": "0e6f0d2e-552d-4686-9f58-c95133fa9f5e", "comment": "Malware payload", "value": "8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871885, "uuid": "106e8851-d7b2-4992-8725-7247476ec944", "value": "T104839E12B4D140BFC5668470527AEE036B3D9A610BE58EDB6F98AD841F79BC2E7302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871885, "uuid": "1fae3671-5183-43a5-b9e8-f0d930880329", "value": "6a84b7445ccacd5d29ac27de2745f356", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871885, "uuid": "f884f09f-632c-482d-a127-4e2b6e67c95a", "value": "1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726871885, "uuid": "c1e4f522-6b6c-446c-9368-8ad619487e10", "value": 80880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871885, "uuid": "53e8cbda-8c73-4ce3-8dfb-5fd11f25481f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1235f8bc-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1726871886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871886, "uuid": "a6a1916c-9ed5-49b0-8fde-81d40434792b", "comment": "Malware payload", "value": "5ff1fca37c466d6723ec67be93b51442", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871886, "uuid": "e44dde73-f1b3-4080-9cf7-75ebcf48dd4c", "comment": "Malware payload", "value": "5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871886, "uuid": "996f9229-2a50-47b2-98d0-5015b5460b10", "value": "T1C9A43A22BB464DF2E59E53B671C5532187F5FC250360E3C393EAE0296F662C2A7336", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871886, "uuid": "3611c6c4-1695-4c62-8045-20bd0648623d", "value": "6dbd7763e94344402d4206b7bab40e1f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871886, "uuid": "f01204ce-5254-49bf-aa3c-cc1d4831edf5", "value": "12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726871886, "uuid": "b898e9dc-c373-4791-a052-ecbffa2f69d7", "value": 450024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871886, "uuid": "78225d8b-cd4b-4176-9f78-404cda4ca5bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "794fb215-77a1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726872088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872088, "uuid": "4fed0386-fd37-4247-b802-4d06c7ed92dd", "comment": "Malware payload", "value": "03fc809eef8308c5e8bf9ef1b7911b71", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872088, "uuid": "8c654937-cdf8-4da7-96fb-97ca50afa3e4", "comment": "Malware payload", "value": "4e35cb46867a1645c7aed9e37908480651e1f49fe09b42a6945b2821c1948dea", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872088, "uuid": "b49c0ee5-68f6-4bf6-97e7-dac419cff6c5", "value": "T178E30945F8909F17C5C252BBFB4E428D772A17A8D3EE720399256F24378B86B0E771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872088, "uuid": "06407d6d-4f25-4de4-a0ce-ea1839fac56b", "value": "3072:7oDYBnfzPimuv4y6ptqd1/atn9833JUnGe:MDunfW7v4y6pEd1/ahKnJd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726872088, "uuid": "a7e58679-e554-4eac-bf71-951eba07bdb9", "value": 146080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872088, "uuid": "6b408c83-9c29-47c7-ad95-a49054f6ccbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872088, "uuid": "5d7cbc4a-a76f-446f-a44c-64f0dc3c18c1", "value": "t1c6f05c00c7840fdc16d4144e41ea953229cc38ee9f51ba92bbceec5fc216884f46c1", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d486afb-77a3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726872819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872819, "uuid": "af72c03c-35ea-4e05-8122-fce322a1d88d", "comment": "Malware payload", "value": "c94c0a97cde08d90c1964778bde29628", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872819, "uuid": "78c53b60-8bbc-4e8c-8d2f-f357bf2752d2", "comment": "Malware payload", "value": "7d369a38ad82b64bb2625b759ac1b7dae4fccc2ab49380704ff9cbde92d38264", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872819, "uuid": "0335a032-cb2e-4e19-bb71-93b8d0e49a15", "value": "T15314A71E2E328F6DF678C73447B78A209B6D23D627E1DA84D2ACD1101F6025E545FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872819, "uuid": "13ccd463-e4f5-4767-98c1-1ebe450d9b6f", "value": "3072:FW02a3BF+E5CTo77RX2RBs0fHgrLQhUjVn56:FW02eBF+Evh2BtfAPQhqD6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726872819, "uuid": "a4959995-f388-491e-b648-7492b175c63a", "value": 198544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872819, "uuid": "62615dd4-1505-4e3a-a67c-9efdc472b26a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872819, "uuid": "08f14b71-490c-4513-9723-d885f7aab414", "value": "t1ea419f58097827b0a7256c5d089dff2bd6a731db7e166c238e11e85eeb69f839d10c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70de4143-77a6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726874221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874221, "uuid": "cbb6fa78-724b-4aac-800d-4af8671274fc", "comment": "Malware payload", "value": "12e5e2bd600de9e7c62ce99d4496d515", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874221, "uuid": "d46bf3c5-6fbc-4c6d-8b85-eb939ef64b6d", "comment": "Malware payload", "value": "3684f4e4511c9b5574d3c85aea5e661dd51fc318834792cba564e296e5c351bf", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874221, "uuid": "30e09243-5daa-47bd-ba78-426eecdc7dfd", "value": "T1279533283792E339D6F6963E170ED034934629ADDBA77E3017E238F59418B7CD6618", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874221, "uuid": "e05877b1-f4d5-4313-8c13-98c249385eae", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874221, "uuid": "1a961282-6693-4caa-9c25-da86a5767010", "value": "49152:5YHfKb4ej10N/MQBMWHHJhvxUBxnYogxxKwNKVdj76:G/kh0pnBMWt+WBB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726874221, "uuid": "fa5eb132-7e97-43c8-a962-18eb64edd7f8", "value": 1900032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874221, "uuid": "cd5cb527-8c8f-4178-8fbb-4ef432f1762c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cef34910-77a6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726874379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874379, "uuid": "da594f4a-65ae-4538-82fa-08a16db37c33", "comment": "Malware payload", "value": "fb3ccc3ca3ee474f17493d314c62ec4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874379, "uuid": "25d75162-4879-4cae-ac03-2dbf6b1828bf", "comment": "Malware payload", "value": "d6b74e14602f1509b82c1605a21b19e55342a588ed3b54c6d52f0f79b4a653b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874379, "uuid": "f314780d-3b9e-45f2-8674-4420c9675dd0", "value": "T16CF33B46A7818B13C0D2177ABADF42453333AB64D7EB23069928AFF43F4679E4E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874379, "uuid": "09e7a525-3c5e-410d-a75f-1720003fd5d7", "value": "3072:kzTN8Wlch2YQ7l7a+h1QJxsTY+WYgtBDJn8ZT6AoqM/9DOAEP:yN5chqJ7a+h1QJxCYsg/DKZT6yM/9SAs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726874379, "uuid": "fcadb3cd-2241-4fda-8db3-1046c24c6bbb", "value": 165472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874379, "uuid": "eb101c79-5487-478a-a278-1fdb446dcfb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874379, "uuid": "5e0158a3-66c2-45e4-a2d4-2394af548316", "value": "t1d33165148926891b69b24ab8ddfc47f195154323ab907e319f2ec8cc1525041f61ad", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccb7982c-77a8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726875234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875234, "uuid": "123f5828-2b4c-4b73-b106-89c16b459330", "comment": "Malware payload", "value": "443c51219ec9e85c205578de8ee36826", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875234, "uuid": "1854780c-e05a-4d53-8a6b-6e8275e50741", "comment": "Malware payload", "value": "2124e9a118f23d5fd491621bf109e053a91bfa3eff9d6a679afd854d0bad82d4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875234, "uuid": "98083eb5-476c-4147-8e41-4dbe61a94f49", "value": "T15EC2F22308967DD0C571487BF9B58C07EB2B939CC9F7B022A1185B5478C5085BAFD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875234, "uuid": "705a8595-1047-4a76-9112-f8bc3c61624d", "value": "768:GptjXPgr1OntOb/VfKp4zio+lwSSbvIrty69q3UELjZ:Gpt0plT9G4Oo+aPbvIRyvLl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726875234, "uuid": "90ae4e61-aef6-4019-a71b-c06da41531d5", "value": 27796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875234, "uuid": "8b2096d9-63c2-45dd-b124-9dfb33909818", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875234, "uuid": "d6154ab5-1b9a-4439-8d20-8fff681ad50b", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8033861f-77a9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726875535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875535, "uuid": "1c84d985-5589-4c87-b725-eb96a9a3ffad", "comment": "Malware payload", "value": "dc5fb9cc5895884e21f7cbbcc9bf7359", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875535, "uuid": "f69a8027-94af-4651-ba84-cdba02010183", "comment": "Malware payload", "value": "5fa9574748472f39a00ba595f7f9bc39ce39ff0a4f91fac45bba7c91f2697a7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875535, "uuid": "7fcc8af0-99ea-4e54-8595-e92ac039f276", "value": "T1D5D30A45F8509F27C6D251BBFB4E428D7B2617A8D3EE72039D256F24378B86B0E361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875535, "uuid": "fc7e97dd-7029-4ebf-bfaa-78d00384016c", "value": "1536:RBDYf5OckzyC0DzUm44N2m02/4VzbnbuCILNQKCuTPti0OvwlwYwywVRcTvhd/wQ:RBDJPyBC4Nl4xniCUNQKBVijG5MnG5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726875535, "uuid": "7271cb31-fc29-452a-b550-ceac34164f40", "value": 142080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875535, "uuid": "88e39dad-2bc8-4e93-9111-e03ed329da8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875535, "uuid": "cbfaaf25-cea6-42af-95ef-ebd5bbafb1db", "value": "t161f05c46cf0909d417ed018990de162629ec7cf316158952faae9c6b80265d1f41d0", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "382eb1a0-77a7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1726875717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875717, "uuid": "06b2e764-2c6f-496b-b238-92d466b99622", "comment": "Malware payload", "value": "f006814e580d5504d379c878d98a28b5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875717, "uuid": "9d08b84c-458b-421e-a80f-619a4e3d6871", "comment": "Malware payload", "value": "5fc921c3943507c3bc9b66ccfc748fa241faa514ea000b0fd1394ad7955bae3b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875717, "uuid": "a6345b1c-6136-419d-b02e-b49be9bc08a3", "value": "T16AB2D0AEDAD4B85AC9EF4C3D81AF51215311748272A7CE9E23755DC07F2E24AA90C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875717, "uuid": "5f872fb7-dabc-4b73-8cec-7b0981d99482", "value": "768:MclUeHbghq5Pjkkf3jqgI0NoLZtPr57o7y5hWm:1lZT57kc3RakGn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1726875717, "uuid": "6d07facd-9a62-4af2-af82-ffc17cb95bb2", "value": 25708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875717, "uuid": "bfb12270-0467-4a1f-8a4e-bb2213f68fd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790466, "uuid": "6ee3e17e-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.198.165:58005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790466, "uuid": "6eeb5d8a-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.205.171.53:50923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790586, "uuid": "b6706e1d-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.143.15:45085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790586, "uuid": "b6706f03-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.176.146:57928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790596, "uuid": "bc6b1d3c-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.50.99.52:44683/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790599, "uuid": "be6626b8-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.252.208:54987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790599, "uuid": "be66298b-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.18.126:37900/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790600, "uuid": "beeb3407-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.42.72:35925/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790603, "uuid": "c0ae58f8-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.233.50:60186/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790614, "uuid": "c7243396-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.112.221:39246/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790619, "uuid": "ca4af7f4-76e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.111.100.234:48246/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790766, "uuid": "21a831c6-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.210.159:53022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790778, "uuid": "28fbdfa3-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.64.192:44080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790828, "uuid": "46e9bb20-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.194.223:58204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790886, "uuid": "698e0946-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.44:32948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790946, "uuid": "8d008c11-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.36.48:37109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726790946, "uuid": "8d1f80b5-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.37.223:39960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791031, "uuid": "bfa6bcad-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.25.3:57083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791125, "uuid": "f7eb0259-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.53.154.170:38765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791126, "uuid": "f833a29e-76e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.136.50:53968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791248, "uuid": "41165e27-76e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.196.234:47151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791248, "uuid": "4121cf44-76e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.23.177:39954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791309, "uuid": "65c4b758-76e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.63:34505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791365, "uuid": "86f14ef8-76e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.132.173:43658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791366, "uuid": "87477389-76e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.70.253:46284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791426, "uuid": "ab923d45-76e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.5.114:41763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791488, "uuid": "cffc186b-76e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.183.219:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791607, "uuid": "173eee71-76e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.162.187:51210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791607, "uuid": "1747bcdf-76e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.197.69:52738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791665, "uuid": "39f83a10-76e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.182.194:40146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791666, "uuid": "3a1389dd-76e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.10.63:46396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791785, "uuid": "817aa815-76e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.108.55:36636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726791967, "uuid": "ed9d921a-76e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.35.219:42658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792148, "uuid": "59bc9b82-76e7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.176.146:57928/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792267, "uuid": "a099ef28-76e7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.243.227.48:53975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792332, "uuid": "c751e13c-76e7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.78.47:38074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792386, "uuid": "e7b31763-76e7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.64.192:44080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792447, "uuid": "0c03cef3-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.63:34505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792447, "uuid": "0c0539ed-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.155.86:49000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792462, "uuid": "14a926a2-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.252.114:57602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792511, "uuid": "31ebfa55-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.158:40802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792532, "uuid": "3ebe4e0a-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.136.169:49585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792565, "uuid": "51f7a58d-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66ecb4509c214_vbfdsg12.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792581, "uuid": "5b94b5aa-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.5.181:36949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792627, "uuid": "771d7a68-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.154.173:40412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792686, "uuid": "9a39695e-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.18:57778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792761, "uuid": "c6d86923-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.23.177:39954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792807, "uuid": "e24d6697-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.100.25:35003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792810, "uuid": "e3f20d6d-76e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.25.3:57083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792926, "uuid": "2966f3d5-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.4:60839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792930, "uuid": "2b7e9fe1-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.116.70:40031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726792988, "uuid": "4e582aa6-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.124.73:36793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793107, "uuid": "95201450-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.221:60640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793166, "uuid": "b882e607-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.229:47356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793166, "uuid": "b883802e-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.202:54021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793225, "uuid": "dbbf6bc6-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.197.69:52738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793226, "uuid": "dc4176ca-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.100.63:48950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793230, "uuid": "de4db6aa-76e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.5.114:41763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793407, "uuid": "4835b5c3-76ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.10.63:46396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793408, "uuid": "4886f6cf-76ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.52:58056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793467, "uuid": "6bcd076c-76ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.4:60839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793585, "uuid": "b24411d9-76ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.219.99:34740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793646, "uuid": "d67c1688-76ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.46.95:48063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793710, "uuid": "fce69fdd-76ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.233.151:47836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726793854, "uuid": "52a85de2-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.114.26:39084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794008, "uuid": "ae06a3ea-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.243.227.48:53975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794008, "uuid": "ae30f9fa-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.5.181:36949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794014, "uuid": "b1e6ec39-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.208:57162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794066, "uuid": "d0ca165d-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.100.25:35003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794067, "uuid": "d14058bd-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.136.169:49585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794082, "uuid": "da6e54d0-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.102.9:53217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794083, "uuid": "db059bbc-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.82.119:41226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794128, "uuid": "f5d87a57-76eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.153.212:43057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794186, "uuid": "18183215-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.78.47:38074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794191, "uuid": "1b145bdd-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.57.190:46738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794246, "uuid": "3c0bd805-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.116.70:40031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794252, "uuid": "3fda1131-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.65.59:48566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794323, "uuid": "69eaaf38-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.74.132:34853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794370, "uuid": "86237f37-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.118.137:52581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794439, "uuid": "af4135db-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.177.58:60198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794502, "uuid": "d4738dd1-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.114.118:48987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794550, "uuid": "f13d225f-76ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.114.207:57710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794607, "uuid": "137a7019-76ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.232.173:37529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794726, "uuid": "5a2ea8ce-76ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.42.202/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794726, "uuid": "5a3010c5-76ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.42.202/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794728, "uuid": "5b4c2e7b-76ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.42.202/x86", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794786, "uuid": "7de8545c-76ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.202:54021/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794786, "uuid": "7e16edb9-76ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.174:45997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794966, "uuid": "e95b16f2-76ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.114.26:39084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726794981, "uuid": "f24b391b-76ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.49.97:53681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795085, "uuid": "3004bbe5-76ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.11.72:58241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795265, "uuid": "9b6e919e-76ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.141.240:47389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795325, "uuid": "bf26483f-76ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.189.172:38556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795506, "uuid": "2b53999a-76ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.80:50972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795506, "uuid": "2b5bf631-76ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.4.248:39016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795507, "uuid": "2bc264e0-76ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.193.85:48008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795507, "uuid": "2bfbb15b-76ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.188.137:43311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795637, "uuid": "78f81417-76ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.61.51:51169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795686, "uuid": "963c3df8-76ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.153.212:43057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795700, "uuid": "9e93656a-76ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.117.7:32921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795867, "uuid": "027e3853-76f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.10.55:50280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795867, "uuid": "0298ca73-76f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.72.25:44281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795868, "uuid": "02a13be4-76f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.57.190:46738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726795986, "uuid": "4931067d-76f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.65.59:48566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796108, "uuid": "920d1f30-76f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.100.23.11:40513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796170, "uuid": "b730a237-76f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.9.183:37207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796285, "uuid": "fbb74a11-76f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.47.194:49314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796406, "uuid": "43d92e3a-76f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.22:54014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796466, "uuid": "67423f8d-76f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.236.212:53539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796479, "uuid": "6f2a91b7-76f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.168.41:58607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796586, "uuid": "aeda00af-76f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.174:45997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796601, "uuid": "b7e5fec0-76f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.86.195:53092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796644, "uuid": "d18fca7c-76f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66ecb44e7f1ca_vdfshd15.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796645, "uuid": "d1e58db1-76f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.118.137:52581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796677, "uuid": "e4f6a71b-76f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.63.164:59312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796765, "uuid": "195a3ebd-76f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.141.240:47389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796825, "uuid": "3d68306e-76f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.189.172:38556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726796826, "uuid": "3df5fec0-76f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.243.79:36956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797006, "uuid": "a95b8b4c-76f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.110.200.244:57896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797010, "uuid": "abcdf096-76f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.100.106:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797126, "uuid": "f07fd7de-76f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.114.207:57710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797145, "uuid": "fc27aa3f-76f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.112.248:55156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797250, "uuid": "3a749089-76f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.9.142:44613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797378, "uuid": "871711aa-76f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.52.203:33009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797430, "uuid": "a5edfa9e-76f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.168.119.17:55798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797486, "uuid": "c7217e2c-76f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.117.7:32921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797549, "uuid": "ecd2454c-76f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.109.29:40518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797664, "uuid": "31ad7fe5-76f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.9.183:37207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797847, "uuid": "9e9a9c4d-76f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.100.23.11:40513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797906, "uuid": "c1a11fe0-76f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.47.194:49314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797907, "uuid": "c20884fb-76f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.74.205:37749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797914, "uuid": "c6430f74-76f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.54.147.229:42874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797918, "uuid": "c8f2a5f9-76f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.67.216:57573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797920, "uuid": "c9d15712-76f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.152.29:48784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726797967, "uuid": "e5d71650-76f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.43.158:53577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798148, "uuid": "51eb0b1c-76f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.98.36:49308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798148, "uuid": "51f5ccde-76f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.133:49780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798263, "uuid": "96835ae3-76f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.216.195:41740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798269, "uuid": "99c6f1a3-76f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.95.119:57448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798326, "uuid": "bc47dee6-76f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.168.119.17:55798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798446, "uuid": "035a7bdd-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.103.218:35102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798450, "uuid": "05af1a68-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.230.65:44314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798511, "uuid": "2a18e371-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.100.163:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798567, "uuid": "4b7cb473-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.36.138:59975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798580, "uuid": "537968c0-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.196.70:45067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798626, "uuid": "6ed2bce1-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.182.123:55997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798686, "uuid": "924aca6e-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.110.200.244:57896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798686, "uuid": "929721e2-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.24.140:45199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798689, "uuid": "94230beb-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.52.203:33009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798714, "uuid": "a31096b3-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.43:55535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798806, "uuid": "da4ca429-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.74.205:37749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798807, "uuid": "dae293b2-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.191.82.65:55376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798866, "uuid": "fdc3f975-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.137.33:54440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798866, "uuid": "fdc72a5f-76f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.92.99:35434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726798987, "uuid": "45c6bbca-76f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.77.80:36301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799046, "uuid": "690f7939-76f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.21.234:55458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799046, "uuid": "69233861-76f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.232:39824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799108, "uuid": "8dd398a8-76f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.9.142:44613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799286, "uuid": "f84a698d-76f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.16.220:11108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799346, "uuid": "1c07af95-76f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.10.55:50280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799437, "uuid": "51f38659-76f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.118.138:47480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799527, "uuid": "87ff8995-76f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.11.41:56259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799528, "uuid": "883aa896-76f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.111.212:41605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799534, "uuid": "8c4b9d80-76f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.193.131:48254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799646, "uuid": "cef4c4fa-76f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.193.173:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799709, "uuid": "f4481bac-76f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.101.240:35147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799766, "uuid": "166eab2d-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.230.65:44314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799825, "uuid": "3934940b-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.216.195:41740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799825, "uuid": "3980ed3d-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.250.212:32835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799825, "uuid": "39b65802-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.98.36:49308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799841, "uuid": "4319ff34-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.59:36310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799886, "uuid": "5db8ea89-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.236.212:53539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799946, "uuid": "817568e4-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.194.90:45764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799946, "uuid": "8182f7e6-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.5.93:51782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726799947, "uuid": "820bca69-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.103.218:35102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800007, "uuid": "a5c3bb01-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.92.99:35434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800066, "uuid": "c8fc74e6-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.196.70:45067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800066, "uuid": "c93206d2-76f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.224.11:38170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800325, "uuid": "6392e7b8-76fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.86:33117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800365, "uuid": "7b533094-76fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.24.140:45199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800366, "uuid": "7bed1dd2-76fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.43:55535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800393, "uuid": "8c1f3aad-76fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.217.100:38303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800485, "uuid": "c2b6d3e9-76fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.x86", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800486, "uuid": "c3739926-76fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.54:53766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800665, "uuid": "2e42e802-76fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.77.80:36301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800667, "uuid": "2f7a165f-76fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.104:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800740, "uuid": "5adc292c-76fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.158.236:55771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800788, "uuid": "778d74e1-76fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.76.0:38060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800847, "uuid": "9ab46dcf-76fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.92.58:51394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800911, "uuid": "c08ccc4f-76fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.97.116:41575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726800971, "uuid": "e45cda04-76fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.52.207:47048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801026, "uuid": "050f781a-76fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.55.79:35369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801086, "uuid": "292428ad-76fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.245.251:59902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801208, "uuid": "71be520b-76fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.16.220:11108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801208, "uuid": "71e105db-76fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.224.11:38170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801446, "uuid": "ff637ca4-76fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.215:44883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801507, "uuid": "2426a837-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.194.90:45764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801565, "uuid": "46b56cea-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.169:39770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801565, "uuid": "46d1bf8c-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.4.56:35529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801567, "uuid": "4781e567-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.133.70:36399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801570, "uuid": "49559880-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.111.212:41605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801628, "uuid": "6bfc8b96-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.169.174:40562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801686, "uuid": "8ea23eaa-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.86:33117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801746, "uuid": "b2ba9663-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.5.93:51782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801761, "uuid": "bb767b35-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.75.181:54677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801774, "uuid": "c3615f6e-76fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.4.67:44152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801941, "uuid": "26a2fb0b-76fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.158.236:55771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801956, "uuid": "2fb156cc-76fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.195.17:55159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726801985, "uuid": "4126830b-76fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.92.58:51394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802046, "uuid": "655b235e-76fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.242:60890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802050, "uuid": "67c643db-76fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.214.145:58178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802227, "uuid": "d11b341e-76fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.160.13:56790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802287, "uuid": "f4e4605b-76fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.215.189:43614/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802287, "uuid": "f4e50087-76fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.99.217:33109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802526, "uuid": "83692b13-76ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.52.207:47048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802596, "uuid": "ad44b9c0-76ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.186.188:38861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802647, "uuid": "cb465e84-76ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.104.249:44582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802826, "uuid": "3674e61d-7700-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.176.170:58885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802886, "uuid": "59d0bd7f-7700-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.55.79:35369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802886, "uuid": "5a0cc373-7700-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.171.1:45621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726802886, "uuid": "5a1c9136-7700-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.32.2:58441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803067, "uuid": "c5eb4941-7700-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.4.56:35529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803067, "uuid": "c5fa18b8-7700-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.171:57671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803067, "uuid": "c616034d-7700-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.169:39770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803068, "uuid": "c698d983-7700-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.177.98:39342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803367, "uuid": "7898d61d-7701-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.36.44:33084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803367, "uuid": "78c5cab7-7701-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.15.157:38319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803425, "uuid": "9b25d633-7701-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.149.122:44617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803425, "uuid": "9b54ac63-7701-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.194.209:58197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803485, "uuid": "bf118a42-7701-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.195.17:55159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803486, "uuid": "bf90208b-7701-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.242:60890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803546, "uuid": "e355c5ae-7701-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.244.208:37578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803727, "uuid": "4f7c3b8d-7702-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.50.57.143:48436/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803846, "uuid": "95f01bdf-7702-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.153.176:42492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803846, "uuid": "96328b1c-7702-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.193.131:48254/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803846, "uuid": "96697cc1-7702-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.9:40169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726803923, "uuid": "c3e22bf0-7702-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.88.198:43856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804026, "uuid": "015da748-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.205.221:34534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804207, "uuid": "6d380532-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.26:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804207, "uuid": "6d3a1914-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.160.13:56790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804219, "uuid": "7496062e-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.137.232:40118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804268, "uuid": "91924f2d-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.9:40169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804268, "uuid": "91f3c741-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/lopsa/66ebb3bf78bd6_Send.exe#111us300", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804276, "uuid": "96c2d71c-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.92.64:35848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804385, "uuid": "d763675a-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.104.249:44582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804445, "uuid": "fb53ca0a-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.184.135.85:41383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804446, "uuid": "fb9c5eb7-7703-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.32.2:58441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804507, "uuid": "2009b1d2-7704-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.186.188:53605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804625, "uuid": "66c266b5-7704-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.51.65:49399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804685, "uuid": "8a412025-7704-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.134.54.197:54232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804688, "uuid": "8c1b6c06-7704-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.205.105:49459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804750, "uuid": "b0e82c54-7704-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.174:44054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804866, "uuid": "f6229bb4-7704-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.194.209:58197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804925, "uuid": "1937aedb-7705-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.149.122:44617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804928, "uuid": "1afa61b8-7705-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.90.6:46007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726804986, "uuid": "3d7549ef-7705-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.15.157:38319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805086, "uuid": "795d4028-7705-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.118.82:36336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805106, "uuid": "852cb968-7705-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.117.239:46372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805107, "uuid": "85a75a18-7705-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.155.66:42671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805121, "uuid": "8de4acb8-7705-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.149.185:47638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805346, "uuid": "14544787-7706-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.75.44:44385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805412, "uuid": "3ba3caa7-7706-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:50886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805465, "uuid": "5b77476f-7706-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.81.174:53975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805470, "uuid": "5dfd0930-7706-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.93.165:53230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805525, "uuid": "7f2c83e4-7706-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.63.157:38666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805645, "uuid": "c6351bd8-7706-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.186.188:53605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805826, "uuid": "326b0c55-7707-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.137.232:40118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805885, "uuid": "55b38945-7707-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.134.54.197:54232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726805898, "uuid": "5d799c4d-7707-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.21.121:41370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806022, "uuid": "a75f80b2-7707-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.108.90:58661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806066, "uuid": "c168b1cb-7707-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.184.135.85:41383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806066, "uuid": "c1a62fb3-7707-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.86.78:52744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806066, "uuid": "c1abe586-7707-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.225.206:38004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806186, "uuid": "08c1d7c3-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.236.73:55339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806186, "uuid": "08e635f1-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.118.82:36336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806188, "uuid": "0a0f55bb-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.244.138:38194/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806191, "uuid": "0bb4939a-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.6.200:40529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806247, "uuid": "2d2b8568-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.44.223:49214/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806254, "uuid": "3134e174-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.187:39043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806267, "uuid": "3927b663-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.93.38:33825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806327, "uuid": "5d3fe3ef-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.72.228:48333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806365, "uuid": "73a1e0e4-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.219.99:34740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806433, "uuid": "9c295870-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.119.224:38817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806485, "uuid": "bb60ca91-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.174:44054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806485, "uuid": "bb7069cb-7708-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.202.83:53422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806610, "uuid": "0575f409-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.225.51:48696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806610, "uuid": "058fe6fc-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.113.240:60436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806726, "uuid": "4abd97c0-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.75.44:44385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806727, "uuid": "4b51ee2f-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.38.90:60685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806800, "uuid": "76ee5fd4-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.130.176:35771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "95403f04-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.186.188:38861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "9552214a-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "955c6f37-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "955ca6f8-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/hiroz3x.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "956b6ee7-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "956b7ba6-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "956c0bc5-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "9587b7fe-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.93.165:53230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "95894b96-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "958b1fd1-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806851, "uuid": "958e0351-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "95b6cffe-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.spc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "95b78044-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "95cf2348-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.i686", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "95e6d0a7-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "962397df-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.223.158.120/ShawLivingTrust.pdf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "962883a0-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.223.158.120/Meissner_2023_W2s.pdf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "96288bcc-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.223.158.120/Dave_Meissner_W2_2023.pdf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "96289031-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.223.158.120/JohnsonLivingTrust.pdf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "9628903b-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.223.158.120/WesternChristianTailgate.pdf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806852, "uuid": "9628c579-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.223.158.120/LoanApplication.pdf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806854, "uuid": "97503f7f-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.181.157.69:88/360.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "younglotus", "colour": "#70a934", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806865, "uuid": "9dcb6d7c-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.127.235:48318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806905, "uuid": "b5bd673d-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://access-htaccess.com/2708.bs64", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806905, "uuid": "b5c87461-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://retireborn.art/files/file.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806906, "uuid": "b5fcdd61-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-head.com/2708.bs64", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806907, "uuid": "b6d6d7f1-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://github-scanner.shop/download.txt", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "b705cc3a-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://github-scanner.shop/l6E.exe", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "b71fa5fb-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.47.74/h0r0zx00xh0r0zx00xdefault/h0r0zx00x.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "b75cbb9e-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806908, "uuid": "b779b26c-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.sparc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "b7c37991-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "b7e53ed5-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "b7e7d8cd-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.arm4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "b7fa3519-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806909, "uuid": "b81f6e49-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806910, "uuid": "b8514e4c-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.17.55:38947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806965, "uuid": "d980e6ae-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726806966, "uuid": "d98cf4f1-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.7/hidakibest.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807025, "uuid": "fce2e81a-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.129.219:58084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807025, "uuid": "fd07e9c6-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.10.7:39035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807026, "uuid": "fd61a10a-7709-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.135.96:52543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807054, "uuid": "0e120c04-770a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.100.206:50681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807085, "uuid": "20a7b429-770a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:50886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807094, "uuid": "25f35506-770a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.234.177:49499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807326, "uuid": "b06226b6-770a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.100.227:41694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807386, "uuid": "d467fca8-770a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.63.195:59068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807387, "uuid": "d486b3d8-770a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.176:42639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807388, "uuid": "d58f82b4-770a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.243.121:50462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807447, "uuid": "f8638efc-770a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.21.121:41370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807531, "uuid": "2ac687e7-770b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.119.132:41188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807567, "uuid": "3fee54e7-770b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.140.74:50788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807807, "uuid": "cf308d3b-770b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.86.78:52744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807866, "uuid": "f1fdc156-770b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.225.206:38004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807866, "uuid": "f25a3201-770b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.64.174:48234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726807928, "uuid": "171fe30c-770c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.106.8:33274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808045, "uuid": "5d428298-770c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.187:39043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808050, "uuid": "5fd95e41-770c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.4.94.157:48172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808109, "uuid": "82f38516-770c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.191.106:47848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808226, "uuid": "c8adfc66-770c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.140.202.220:37492/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808229, "uuid": "ca63abdb-770c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.93.123:36796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808285, "uuid": "ebce07c0-770c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.216.238:40506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808345, "uuid": "1012c3f2-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.129.219:58084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808358, "uuid": "179f29ef-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.132.57:39560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808470, "uuid": "5a69ffde-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.92:35828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808528, "uuid": "7cc69ca7-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.17.55:38947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808529, "uuid": "7da3c652-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.129:38287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808590, "uuid": "a21c2fe8-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.91:37284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808591, "uuid": "a23eac09-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.109.215:49036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808591, "uuid": "a249871c-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.159.138:48586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808706, "uuid": "e6efeb84-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.133.219:53288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808719, "uuid": "eefdeada-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.20.9:35583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808735, "uuid": "f8378a90-770d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.201:59838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808886, "uuid": "526db5e7-770e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.38.90:60685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808890, "uuid": "54578c09-770e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.234.209:53029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808946, "uuid": "761184d1-770e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.132.57:39560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726808946, "uuid": "7631b177-770e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.243.121:50462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809007, "uuid": "9a8c7f9d-770e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.10.7:39035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809126, "uuid": "e1029ee8-770e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.161:33262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809141, "uuid": "ea14a2f0-770e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.113.201:45772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809186, "uuid": "0504a74f-770f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.140.74:50788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809186, "uuid": "052b3596-770f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.119.132:41188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809486, "uuid": "b7d6f60e-770f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.87.21:45056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809545, "uuid": "db019e0a-770f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.64.174:48234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809546, "uuid": "db58fb83-770f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.93.123:36796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809607, "uuid": "000671e2-7710-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.106.8:33274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809665, "uuid": "22de97b9-7710-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.215.48:42057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809726, "uuid": "47017ac3-7710-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.73.66:40479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809727, "uuid": "47582925-7710-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.225:44440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809798, "uuid": "71bcff64-7710-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.146.170:47007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726809846, "uuid": "8e621bf5-7710-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.188.119:40227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810024, "uuid": "f8d2dbeb-7710-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.133.219:53288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810025, "uuid": "f919d92b-7710-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.113.240:60436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810087, "uuid": "1dd7d319-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.191.135:57846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810146, "uuid": "41005ed0-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.91:37284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810146, "uuid": "411095c9-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.142.179:57389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810146, "uuid": "41754043-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.200.111:56102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810210, "uuid": "67b2a612-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.216.238:40506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810211, "uuid": "67f83ece-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.135.96:52543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810211, "uuid": "67fc6b07-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.99.89:34943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810221, "uuid": "6e3f71f0-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.240.202:56114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810267, "uuid": "896ca9ad-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.127.235:48318/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810327, "uuid": "ad3d1cb4-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.109.215:49036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810357, "uuid": "bedd7d9d-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.175.219:58705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810388, "uuid": "d192b4b2-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.52:43371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810447, "uuid": "f49d230a-7711-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.79.2:36751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810576, "uuid": "41685fb4-7712-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.86.27:50158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810626, "uuid": "5f448e37-7712-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.234.209:53029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810630, "uuid": "61c7216d-7712-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.159.138:48586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810639, "uuid": "674d3dff-7712-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.121.26:49475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810836, "uuid": "dc4adc70-7712-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.42.179:37189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810925, "uuid": "1193d532-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.161:33262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810925, "uuid": "11cd82a1-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.151.195:55240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810925, "uuid": "11d52ef6-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.3.171:42709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810929, "uuid": "13f740bf-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.95.115:42817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726810989, "uuid": "37f9d56e-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.105.43:47987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811045, "uuid": "58f320e9-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.87.21:45056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811047, "uuid": "5a823cae-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.132.162:48715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811166, "uuid": "a1236c9c-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.225:44440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811226, "uuid": "c4d47c86-7713-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.26:51199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811465, "uuid": "53adacb7-7714-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.142.179:57389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811525, "uuid": "7763f876-7714-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.92.61:44782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811541, "uuid": "80b6b66a-7714-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.210.228:60924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811584, "uuid": "9a5f6a4d-7714-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/revada/66ed0c1bc99a0_setup333.exe#lyla", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811592, "uuid": "9f646935-7714-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.126:35220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811707, "uuid": "e3ea3a02-7714-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.121:50885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726811885, "uuid": "4e0f15e1-7715-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.99.89:34943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812066, "uuid": "b982b380-7715-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.79.2:36751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812129, "uuid": "df7d634e-7715-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.45.231:40532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812136, "uuid": "e370328a-7715-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.97.82:54102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812185, "uuid": "00db9816-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.86.27:50158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812188, "uuid": "0242799f-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.220.198:40226/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812190, "uuid": "0370e37c-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.17:41710/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812204, "uuid": "0bcd4870-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.151.53:42192/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812219, "uuid": "14da095e-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.149.67:60028/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812221, "uuid": "1650648a-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.36.183:51016/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812248, "uuid": "25f7abdf-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.103.238:36737/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812264, "uuid": "2ff6d770-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.211.219:35740/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812365, "uuid": "6be7280e-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:48301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812366, "uuid": "6c4f0e76-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.20.9:35583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812426, "uuid": "902a957d-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.126.22:57713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812493, "uuid": "b825b22d-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.132.162:48715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812545, "uuid": "d721c475-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.151.195:55240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812546, "uuid": "d792fbaa-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.71.117:38354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812610, "uuid": "fdedc167-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.6.200:40529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812613, "uuid": "ff986ebc-7716-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.44.240:57984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812615, "uuid": "00d423d6-7717-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.99.90:37129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812640, "uuid": "0fbf38dc-7717-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.235:60535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812725, "uuid": "4253030c-7717-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.45.231:40532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812732, "uuid": "4677a427-7717-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.171.85:45506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726812851, "uuid": "8d554e96-7717-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.44.143:39634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813087, "uuid": "1a023547-7718-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.202.137:39991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813091, "uuid": "1cafdc75-7718-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.173.145:51463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813094, "uuid": "1e2df951-7718-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.126:35220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813329, "uuid": "aa80e7c2-7718-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.118.78:58411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813337, "uuid": "af11a16c-7718-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.136.176:52571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813390, "uuid": "cea96010-7718-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.139.168:59094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813450, "uuid": "f2713eb0-7718-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.154.197:40339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813569, "uuid": "39a9f30e-7719-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.57.20:35765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813685, "uuid": "7e7a1852-7719-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:48301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813812, "uuid": "ca2bded2-7719-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.95.13:42169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813839, "uuid": "da74f200-7719-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.107.210:38798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813872, "uuid": "ee20ded8-7719-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.151.57:54074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726813882, "uuid": "f3ebcf50-7719-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.94.115:37973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814046, "uuid": "55e72435-771a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.99.90:37129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814108, "uuid": "7af559d0-771a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.171.85:45506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814109, "uuid": "7b5f4d75-771a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.199:38316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814232, "uuid": "c4b5aa33-771a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.77.192:43174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814325, "uuid": "fc71a347-771a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.143.94:57128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814345, "uuid": "08312ca2-771b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.71.117:38354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814345, "uuid": "083a06af-771b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.44.240:57984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814346, "uuid": "0896ad80-771b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.44.143:39634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814408, "uuid": "2d97e77a-771b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.233.35:55032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814525, "uuid": "7348aa9f-771b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.214.36.157:34480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814708, "uuid": "e049ccbb-771b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.136.176:52571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814721, "uuid": "e83b173b-771b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.21:56485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814735, "uuid": "f0cdee14-771b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.173.145:51463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814799, "uuid": "1669232e-771c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.126.126:57374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814826, "uuid": "26a6c5e2-771c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.224:34526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726814956, "uuid": "73fc6248-771c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.67.215:36961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815070, "uuid": "b7fd7120-771c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.102.101:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815156, "uuid": "eba5ca6c-771c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.90.165:48781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815184, "uuid": "fc71626d-771c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.169.236:41659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815307, "uuid": "455d2d1c-771d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.95.13:42169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815310, "uuid": "475d07ea-771d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.141.156:55976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815380, "uuid": "70ed5115-771d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.49.167:37015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815425, "uuid": "8befc34a-771d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmpfiles.org/dl/13064919/rcqirfnqr.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815426, "uuid": "8c3220bc-771d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.199.17:48066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815442, "uuid": "96203fc8-771d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.103.31:50163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815666, "uuid": "1b692436-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.152.134:48853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815725, "uuid": "3ea8d08b-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.151.57:54074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815846, "uuid": "86a95f0c-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.224:34526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815848, "uuid": "87bf1806-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.86.145.42:55898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815907, "uuid": "aaef96ed-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.65.81:59175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726815966, "uuid": "ce2043db-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.143.94:57128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816026, "uuid": "f1ff98c4-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.179:32792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816026, "uuid": "f20f6436-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.209.238:55593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816040, "uuid": "fa75e76e-771e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.42.88:40096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816149, "uuid": "3b35f877-771f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.167:59366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816212, "uuid": "612fdfe4-771f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.89.135:59459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816265, "uuid": "80704149-771f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.63.195:59068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816273, "uuid": "853a041f-771f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.17.166:36922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816326, "uuid": "a4fc90b2-771f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.47.112:60078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816446, "uuid": "ec2871f2-771f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.126.126:57374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816446, "uuid": "eca659f8-771f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.233.35:55032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816685, "uuid": "7ad7515d-7720-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.199.17:48066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816699, "uuid": "8333f445-7720-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.127.32:48243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816713, "uuid": "8ba99a8a-7720-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.90.165:48781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816812, "uuid": "c645c71e-7720-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.180.243:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816825, "uuid": "ce7c0a83-7720-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.240.219:42919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816986, "uuid": "2dfe2937-7721-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.205.105:49459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726816995, "uuid": "33ba9727-7721-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.62.31:52181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817106, "uuid": "760b4520-7721-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.152.134:48853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817107, "uuid": "7692e698-7721-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.55:60001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817194, "uuid": "a9ed052e-7721-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.35.22:37004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817410, "uuid": "2aacbb06-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.65.81:59175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817410, "uuid": "2abbaccd-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.42.88:40096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817412, "uuid": "2c4c0fee-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.46.109:34624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817467, "uuid": "4ce3f0a6-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.96.23:36394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817584, "uuid": "92dacebc-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817584, "uuid": "92db0083-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817584, "uuid": "92dbe24c-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817584, "uuid": "92dc0fca-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817584, "uuid": "92dfd450-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817584, "uuid": "92e424c5-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817584, "uuid": "92e5008e-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817584, "uuid": "92ea15d6-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817587, "uuid": "94b4b9c7-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94c9278d-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.50.176.85/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94d3fcef-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.50.176.85/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94d4a632-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.50.176.85/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94d4ab0e-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.50.176.85/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94d6342f-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.50.176.85/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94eda9c0-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94efc6a2-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94f05986-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "94fea7b8-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817588, "uuid": "95200efc-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817589, "uuid": "957a9b91-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817589, "uuid": "958d993a-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817589, "uuid": "95d3dd6a-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.163/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817589, "uuid": "95e9493c-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "96027747-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "964cd5f8-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "965bd703-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "965bec80-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817590, "uuid": "967ef82e-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.52.167/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817591, "uuid": "96ad2e51-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817591, "uuid": "96ae37ad-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.52.167/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817593, "uuid": "97e6803f-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.188.21.252/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817614, "uuid": "a4a84f2b-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.188.21.252/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817614, "uuid": "a4a8753d-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.188.21.252/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817614, "uuid": "a4a99152-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.188.21.252/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817614, "uuid": "a4b154c7-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.163/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817614, "uuid": "a4b15575-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.163/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817614, "uuid": "a4ba0c51-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.163/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817614, "uuid": "a4baa3fa-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.188.21.252/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817614, "uuid": "a4bbe501-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.163/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817647, "uuid": "b81012e6-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817748, "uuid": "f45cdd74-7722-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.249.58:52351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817826, "uuid": "229cc0c1-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.89.135:59459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817831, "uuid": "259b8425-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.188.37:49232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726817885, "uuid": "4608e4fb-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.121.176:60046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818006, "uuid": "8e7597d6-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818022, "uuid": "97e462dd-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.54:53766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818066, "uuid": "b1d0e820-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.127.32:48243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818066, "uuid": "b1d245a8-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.45:39221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818066, "uuid": "b1d609d3-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.76.0:38060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818126, "uuid": "d571f9a9-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818126, "uuid": "d57d56af-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.42.69:45894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818126, "uuid": "d5a211d5-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818185, "uuid": "f89d3bd3-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/av.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818185, "uuid": "f8aa0899-7723-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818245, "uuid": "1cc937db-7724-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.16.8:48830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818381, "uuid": "6d7118f1-7724-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.246.1:49741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818428, "uuid": "89e50258-7724-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.123.93:60324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818488, "uuid": "ad3e7be2-7724-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.184.31:47343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818546, "uuid": "cfe6165b-7724-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.254.47:43995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818608, "uuid": "f505d826-7724-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.94.27:47567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818725, "uuid": "3aae8fce-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/gmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818725, "uuid": "3ab491ac-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/tel.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818725, "uuid": "3ad58fcc-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/garm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818725, "uuid": "3af8ae00-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/tel.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3bbf6b0e-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.251.20:38217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3bcc8b00-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/garm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3bd1e906-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/tel.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3c00e873-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/tel.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3c023f43-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/garm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3c12c935-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/garm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3c1a612f-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/tel.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3c2c9488-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/tel.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818727, "uuid": "3c36c456-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/gmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818728, "uuid": "3c451b17-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/gx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818728, "uuid": "3c476961-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/tel.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818784, "uuid": "5dc98c95-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/pov", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818784, "uuid": "5e2c9898-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/r.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818784, "uuid": "5e37f6a7-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/t", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e3e6860-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/gg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e4a58a2-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/tenda.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e4a8f9f-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e520689-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/lol", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e54927f-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/j", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e54fff6-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/lil", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e550b93-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/g", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e573f1c-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/t.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e5a959c-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/h", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818785, "uuid": "5e5c907d-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.238/multi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818845, "uuid": "82750cf1-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/av.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818847, "uuid": "8353b6ff-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/av.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818847, "uuid": "8353d097-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/pov", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818847, "uuid": "8357ccd9-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/pov", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818847, "uuid": "83afe712-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/h", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818847, "uuid": "83b977c3-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/t.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818847, "uuid": "83c50fd4-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/lol", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "83c7c160-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/multi", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "83d28554-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/x", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "83d85adb-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/g", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "83d9c6ee-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/r.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "83daaa41-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/t", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "83e47f64-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/lol", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "84034cf3-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/h", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "8407c7f7-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/t.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "840acc5a-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/tenda.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "840ae478-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/tenda.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "840e2317-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/t", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "840e8c88-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/h", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "840eee0e-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/gg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "841cb7e4-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/multi", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "841dc1b8-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/x", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "8424f18b-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/lil", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "84276424-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/r.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "84282b8f-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/j", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "842a4921-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/multi", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "8430086d-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/lil", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "843022c1-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/tenda.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "843039de-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/lol", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "8430c83e-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/g", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "843d45bc-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/lil", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "843d5e68-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/t.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "843e49ea-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/gg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "84423cd4-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/x", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "84441c66-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/gg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "844dcbdb-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/j", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "84513a9d-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/r.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818848, "uuid": "8451e6e1-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/t", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818849, "uuid": "84bc46a8-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/j", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818849, "uuid": "84d1ca6b-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/g", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818853, "uuid": "86e630ec-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/pov", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818853, "uuid": "86e6bb9c-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/av.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818909, "uuid": "a87e06d7-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/tel.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818909, "uuid": "a885d0dd-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/gmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818910, "uuid": "a9004a6b-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/gmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818910, "uuid": "a900ab01-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/garm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818910, "uuid": "a93277eb-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/tel.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818910, "uuid": "a949cbe1-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/tel.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818911, "uuid": "a95a78da-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/tel.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818911, "uuid": "a98273ef-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/gmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818911, "uuid": "a9c971d3-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/garm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818912, "uuid": "aa0cf691-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.55:60001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818912, "uuid": "aa4752ad-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/garm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818913, "uuid": "aa9e68ba-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/tel.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818916, "uuid": "ac9d3133-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818917, "uuid": "ad30e26d-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/garm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818917, "uuid": "ad62b59e-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818917, "uuid": "ad7a6795-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/tel.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "ad856a22-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "ad95ae5a-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/tel.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "adbb12ed-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/tel.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "adbd1819-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/garm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "adc189b7-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/tel.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "ade6e6fe-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "adf07c76-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/garm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "adf4a406-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/tel.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818918, "uuid": "adfc657d-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/tel.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818919, "uuid": "ae3ef80c-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/garm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818919, "uuid": "ae4feb2b-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818919, "uuid": "ae6b1af4-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818919, "uuid": "ae6c21d5-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/tel.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818919, "uuid": "ae70a333-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/tel.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818919, "uuid": "ae8e3a23-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818919, "uuid": "ae9be91d-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/garm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818919, "uuid": "aea19a4c-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/tel.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818920, "uuid": "aeb6b6e4-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/garm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818920, "uuid": "aebd8aa3-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/garm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818920, "uuid": "af1105e7-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/gx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818920, "uuid": "af4599b7-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/tel.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818921, "uuid": "af53f3d6-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818921, "uuid": "af5a5dc4-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818921, "uuid": "af8c6bc9-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818921, "uuid": "afa72a51-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818921, "uuid": "afce2967-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/tel.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818922, "uuid": "affc0bde-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/gmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818922, "uuid": "b0427b7d-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/tel.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818922, "uuid": "b05c5568-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/garm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818922, "uuid": "b060f69e-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/tel.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818922, "uuid": "b0716f28-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/garm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818923, "uuid": "b08c74dd-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818923, "uuid": "b08f6640-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818923, "uuid": "b0b32ff3-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/tel.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818923, "uuid": "b0cc66c7-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/gmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818923, "uuid": "b0d6236c-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/gx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818923, "uuid": "b0e3655a-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/tel.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818924, "uuid": "b1159a96-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://evinizicinsanat.xyz/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818924, "uuid": "b11c6782-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/gx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818924, "uuid": "b120d4b3-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/tel.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818924, "uuid": "b120dd76-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://enerjikcocukoyunlari.xyz/gmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818964, "uuid": "c978f9ba-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yeniakillitelefonlar.xyz/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726818968, "uuid": "cbb86575-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.0.13:45741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819025, "uuid": "edbdccc7-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.86.145.42:55898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819029, "uuid": "f030bc92-7725-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.123.142:49354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819145, "uuid": "351a6c1d-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.88.136:43828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819266, "uuid": "7d51f2e4-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.86.105:37345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819266, "uuid": "7d78c88a-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.188.37:49232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819267, "uuid": "7d89d0b8-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.62.31:52181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819289, "uuid": "8ad9a720-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.93.10:33919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819326, "uuid": "a0b1d26c-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.121.176:60046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819326, "uuid": "a0b7238d-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.249.58:52351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819326, "uuid": "a0e4fe2e-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.45:39221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819393, "uuid": "c8b8a6a1-7726-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.92:45780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819507, "uuid": "0d24effb-7727-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.0.13:45741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819512, "uuid": "101556dc-7727-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.34.174:42833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819632, "uuid": "57161ef7-7727-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.62.35:48517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819688, "uuid": "78c9afee-7727-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.84.206:43454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819688, "uuid": "78f70dda-7727-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.175.181:36324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819808, "uuid": "c0657731-7727-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.192.234:34334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819866, "uuid": "e2aa2f7d-7727-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.62.35:48517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819925, "uuid": "061cdf25-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.16.8:48830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726819929, "uuid": "08424f25-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.203.149:46491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820045, "uuid": "4dd55c87-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.123.93:60324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820049, "uuid": "4fa9dcdd-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.246.1:49741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820166, "uuid": "957eb6e9-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.254.47:43995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820166, "uuid": "9594b571-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.102.40:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820171, "uuid": "986d62b8-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.255.174:32893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820226, "uuid": "b958f21c-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.251.197:50580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820290, "uuid": "dfc52428-7728-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.60.186:42969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820346, "uuid": "00bf91c7-7729-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.78.81:59423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820407, "uuid": "2576e2c3-7729-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.94.27:47567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820465, "uuid": "48081993-7729-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.57:55388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820525, "uuid": "6bd051a5-7729-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.251.20:38217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820674, "uuid": "c463d414-7729-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.30.221:60796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820841, "uuid": "27e99f14-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.9.194:53363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820885, "uuid": "42635921-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.85.112:43030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820885, "uuid": "42751afc-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.123.142:49354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820886, "uuid": "42aa131b-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.26.194:46809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820946, "uuid": "669a8347-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.97.70:53659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820949, "uuid": "682feb93-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.92:45780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726820962, "uuid": "7025f2f4-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.254.45:51226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821010, "uuid": "8ca259c7-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.149.3:33260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821127, "uuid": "d248333b-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.34.174:42833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821186, "uuid": "f5bde002-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.192.234:34334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821197, "uuid": "fbfd0bb2-772a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.73.22:55895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821247, "uuid": "19d20bcb-772b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.79.193:51418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821247, "uuid": "1a1eb014-772b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.143.170:50652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821365, "uuid": "6034a1e9-772b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66ed337476b90_vfdshd.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821485, "uuid": "a7b64a77-772b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66ed33717e4c1_vfdshfdag15.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821487, "uuid": "a9149e40-772b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.49:49689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821607, "uuid": "f0c29541-772b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.86.105:37345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821608, "uuid": "f0ec1153-772b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.38.7:45898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821612, "uuid": "f3986b95-772b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.253.44:51644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821726, "uuid": "37927e9f-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.175.68:49866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821729, "uuid": "3914040c-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.36.64:55639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821786, "uuid": "5b032679-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.255.174:32893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821793, "uuid": "5f410e62-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.60.186:42969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821845, "uuid": "7eb3e53d-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.84.206:43454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821846, "uuid": "7f12072b-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.196.203:37137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821965, "uuid": "c61fdc1a-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821965, "uuid": "c6365a28-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/carm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821965, "uuid": "c63e0296-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/earm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726821966, "uuid": "c64fc987-772c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.62.237/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822085, "uuid": "0d4ff640-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.26.194:46809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822085, "uuid": "0d7270d2-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.182.173:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822207, "uuid": "563a4381-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.57:55388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822211, "uuid": "5876f0a0-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.214:42995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822266, "uuid": "793ceb55-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.252.3:48670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822266, "uuid": "799f6050-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.254.45:51226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822328, "uuid": "9e0fd4ac-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.153.193:41954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822328, "uuid": "9e907809-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.171:56456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822385, "uuid": "c0310dab-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.251.237:43740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822385, "uuid": "c038bf77-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.78.81:59423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822446, "uuid": "e4c19588-772d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.133.167:56359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822565, "uuid": "2bb8c218-772e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.97.70:53659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822566, "uuid": "2c45e05d-772e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.9.194:53363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822625, "uuid": "4f7c3cf7-772e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.217.194:45647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822685, "uuid": "73208306-772e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.79.193:51418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822688, "uuid": "751d1e11-772e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.255.51:45324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822746, "uuid": "972e2121-772e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.89.244:57992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822808, "uuid": "bc928aa6-772e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.4.209:40763/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822960, "uuid": "17304788-772f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.242.46:60787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726822987, "uuid": "26e969ae-772f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.49:49689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823019, "uuid": "3a02ff48-772f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.111.75.217:54366/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823019, "uuid": "3a407e8c-772f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.179:43678/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823165, "uuid": "91199c3a-772f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66ed336eac985_vdfhssfdg12.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823350, "uuid": "ffa0e2ab-772f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.101.82:36942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823470, "uuid": "472f8f82-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.21.132:56146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823525, "uuid": "6797b325-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.107.11:52827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823528, "uuid": "695f60e6-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.139.87:34788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823585, "uuid": "8b82c483-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.75.135:54392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823599, "uuid": "9413a7bd-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.196:35835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823662, "uuid": "b968c678-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.186.230:53629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823708, "uuid": "d4dc45b9-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.236.107:33611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823768, "uuid": "f8829221-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.253.44:51644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823769, "uuid": "f90f1728-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.178.80:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823779, "uuid": "ff75cb81-7730-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.171:56456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823945, "uuid": "62509f2c-7731-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://github-scanner.com//l6E.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726823962, "uuid": "6c271800-7731-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.214:42995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824008, "uuid": "87620319-7731-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.177.124:48302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824185, "uuid": "f117a805-7731-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.251.237:43740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824186, "uuid": "f1e6782c-7731-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.252.3:48670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824193, "uuid": "f6248f69-7731-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.77:48286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "14bdbac4-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "14e56782-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "14e9f982-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "14f33d4a-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "14f9ebfc-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/gmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824245, "uuid": "14fe36a3-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824246, "uuid": "1595d7e6-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824246, "uuid": "1598b2cd-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824306, "uuid": "391625f1-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.35.94/femboy.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824306, "uuid": "392eaff9-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.11.114/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824321, "uuid": "4250ed48-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.9.18:45297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824366, "uuid": "5ccdbe7d-7732-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.89.244:57992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824671, "uuid": "1293f1ae-7733-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.217.194:45647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824789, "uuid": "58ebb6ea-7733-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.210.62:58589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824847, "uuid": "7be7612b-7733-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.107.11:52827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824908, "uuid": "9fff943f-7733-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.101.82:36942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824908, "uuid": "a0320e59-7733-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.196.29:45148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824908, "uuid": "a041fdb0-7733-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.228.109:48824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726824965, "uuid": "c22feb1b-7733-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.44/Aqua.x86", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825086, "uuid": "09f7c1d7-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.21.132:56146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825145, "uuid": "2da660e0-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.154.225:49476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825146, "uuid": "2dfde020-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.186.230:53629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825206, "uuid": "52002c12-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.75.135:54392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "75744bc8-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.58/mips.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "75751b65-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.58/mipsel.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "75756546-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.58/arm6.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "757cd3fa-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.58/arm5.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "75b09dec-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.58/arm7.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825266, "uuid": "75bd2ae1-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.58/arm.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825269, "uuid": "7726cd9c-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.21.54:47021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825325, "uuid": "98cacc7b-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/mips.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825325, "uuid": "98e8e2ab-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/arm6.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "990cb722-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/arm.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "991262cb-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/arm5.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "991f90aa-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/mipsel.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825326, "uuid": "992557e5-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/arm7.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825386, "uuid": "bcd724aa-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/arm", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825386, "uuid": "bcd7ad01-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825386, "uuid": "bcf5b624-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/arm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825386, "uuid": "bcf84308-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825386, "uuid": "bd1e57f4-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825386, "uuid": "bd2c3b0c-7734-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/arm7", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825508, "uuid": "05cf212e-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.163:38872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825565, "uuid": "2782a9c7-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/x86_64.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825565, "uuid": "279fef6b-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/x86_64", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825565, "uuid": "27a1bf8e-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.58/x86_64.nn", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825625, "uuid": "4ba83ade-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.231.37.153/criptonize.mips", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825686, "uuid": "6fb99951-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.236.107:33611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825745, "uuid": "93054125-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.231.37.153/criptonize.mipsel", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825745, "uuid": "9309198f-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.231.37.153/criptonize.armv5l", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825745, "uuid": "931c4479-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.231.37.153/criptonize.armv6l", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825745, "uuid": "9344f8ce-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.177.124:48302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825746, "uuid": "936d786f-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.231.37.153/criptonize.armv7l", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825806, "uuid": "b7752ebd-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.231.37.153/criptonize.i586", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825926, "uuid": "ff09f716-7735-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.172:39104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726825986, "uuid": "227f65ae-7736-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.179.64:37581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826109, "uuid": "6bfa8a03-7736-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.199.124:60361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826166, "uuid": "8dffea9e-7736-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.113.115.33/thebig/noode.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826287, "uuid": "d5e16b4b-7736-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.231.52:56215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826288, "uuid": "d6bc8e00-7736-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.217:38300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826466, "uuid": "40a57bf0-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.44/Aqua.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826466, "uuid": "40b0ec33-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.44/Aqua.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826482, "uuid": "4a4010ed-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.225:56540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826525, "uuid": "63d05d84-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.210.62:58589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "d084a805-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "d08e7f20-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "d099ef6b-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "d0a4b973-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.154.225:49476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "d0a5b6b8-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "d0a9df8f-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "d0aa4491-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826707, "uuid": "d0ac9e9d-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "d0b8e07f-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "d0c049d7-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "d0c6650b-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826708, "uuid": "d0cad172-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826728, "uuid": "dcbd912a-7737-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.179.159:50489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826825, "uuid": "169fac3e-7738-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.213/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726826961, "uuid": "67a5ab94-7738-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.150.141:52756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827130, "uuid": "cc9a1836-7738-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.20.30:54235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827132, "uuid": "cde19be5-7738-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.221:60426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827187, "uuid": "ee580a80-7738-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.88.56:49428/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827666, "uuid": "0c1b6aa4-773a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.142:47860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827793, "uuid": "57a5c6d1-773a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.163:34757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827905, "uuid": "9ab3bf77-773a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.52:43371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827907, "uuid": "9b700935-773a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.231.52:56215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726827968, "uuid": "bfcbd047-773a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.120.3:49860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828025, "uuid": "e1d541e6-773a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.229.232:56747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828025, "uuid": "e21d43ff-773a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.100.227:41694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828086, "uuid": "067cb3bd-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.109.159:51155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828119, "uuid": "19bf2696-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.44.213:41729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828146, "uuid": "29fabdf5-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.179.159:50489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828328, "uuid": "96dcf5ce-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.111:40663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828334, "uuid": "9a30c2b4-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.179.64:37581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828335, "uuid": "9ac3e160-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.232.174.6:41328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b783b450-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/c", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b783c20d-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/multi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b783c242-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/bootnoot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b7844265-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/u", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b7848f12-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/vc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b784a004-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/botnt.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b784d185-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/botnt.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b784fc02-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b784ff66-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/phi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b7854b05-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/b", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b785a126-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b785a93a-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/aisuru.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b78637ee-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/aisuru.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b7864ca5-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/botnt.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b786587f-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/hik", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b786cbd3-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/z.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b786ef19-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/aisuru.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b786faf0-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/aisuru.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b786fe14-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/tplink", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b787188d-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/botnt.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b7874bfb-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/z", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b7879417-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/bootnoot.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79299b4-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b792ced7-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/xaxa", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b794137f-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/li", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b795589b-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/f", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b795838d-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/k.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79594cc-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/weed", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b799033d-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/aisuru.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79b3f7f-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/aisuru.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79ba453-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/lll", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79c3383-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/aisuru.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79c44ca-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/botnt.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79c4aa2-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/botnt.armv7v5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79c51fb-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/ipc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79e00b8-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/aisuru.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79ee897-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/wget.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828383, "uuid": "b79efd31-773b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.147.200.141:8080/av.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828506, "uuid": "00d28077-773c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.217:38300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828507, "uuid": "014443fe-773c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.88.56:49428/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828625, "uuid": "47d8e994-773c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.228.109:48824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828686, "uuid": "6c1d8354-773c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.52:51515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828686, "uuid": "6c27e609-773c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.70.145:49095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828749, "uuid": "9167f6b6-773c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.150.141:52756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828925, "uuid": "fa75369b-773c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.122.115.163:58719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726828941, "uuid": "03acb414-773d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.199:45265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829107, "uuid": "6700253e-773d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.20.30:54235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829107, "uuid": "670ebe1a-773d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.78:58376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829174, "uuid": "8e8ba38b-773d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.25.183:54959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829226, "uuid": "ad980e11-773d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.227.60:38156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829285, "uuid": "d10e76d0-773d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.61.231.208:48337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829408, "uuid": "1a10944c-773e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.120.3:49860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829535, "uuid": "6629dc83-773e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.74.154:55877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829707, "uuid": "cc625b05-773e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.229.232:56747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829708, "uuid": "ccf7aa80-773e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.23.163:55606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829836, "uuid": "19a16fd1-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.151.58:56827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829853, "uuid": "23d489db-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.204.13:57683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829885, "uuid": "36e2af9b-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.139.125:37829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726829885, "uuid": "36ed1bdb-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.109.159:51155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830009, "uuid": "80453485-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830009, "uuid": "804cd0fa-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830009, "uuid": "8057f5e4-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830009, "uuid": "809db2ed-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830009, "uuid": "80ad5782-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830009, "uuid": "80c64ca0-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "811a55c5-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "811a57cf-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "81224ee4-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "812250f4-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830010, "uuid": "81452f81-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830067, "uuid": "a2e02b96-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.193.85:48008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830067, "uuid": "a2ee2211-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.70.145:49095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830067, "uuid": "a362136f-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.111:40663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830125, "uuid": "c583e4d7-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.52:51515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830125, "uuid": "c5e5356d-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.199:45265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830186, "uuid": "ea33a785-773f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.80.128:48411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830611, "uuid": "e79e49fc-7740-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.236.160.67:49828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830725, "uuid": "2b696bbc-7741-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.67.215:36961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830730, "uuid": "2e1bf1be-7741-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.65.160:49901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830918, "uuid": "9e6a76ca-7741-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.202:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830965, "uuid": "ba4dd8bb-7741-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.55.91:38980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726830965, "uuid": "ba5082b1-7741-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.227.60:38156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831025, "uuid": "de42a5c3-7741-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.153.176:42492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831027, "uuid": "df6bd64d-7741-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.171.67:35702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831033, "uuid": "e2efb09d-7741-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.142:47860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831085, "uuid": "0220c756-7742-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.78:58376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831086, "uuid": "0251adec-7742-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.122.115.163:58719/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831386, "uuid": "b50d73d5-7742-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.74:58031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831447, "uuid": "d9c17ac5-7742-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.23.163:55606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831626, "uuid": "44183838-7743-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.80.128:48411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726831926, "uuid": "f71c7042-7743-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.87.211:36575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832045, "uuid": "3e35ef8f-7744-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.202:40842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832107, "uuid": "63183e0c-7744-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.15.217:42907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832135, "uuid": "739c485b-7744-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.204.13:57683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726832826, "uuid": "0f827214-7746-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.141:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833185, "uuid": "e56722d2-7746-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.210/bins/Rakitin.x86", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833185, "uuid": "e5dedcc3-7746-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.65.160:49901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833187, "uuid": "e6e7059c-7746-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.74:58031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833202, "uuid": "ef9bc435-7746-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.14.177:39665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833307, "uuid": "2e7ca26a-7747-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.38.74:44711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833309, "uuid": "2f7b7ea0-7747-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.179.236:49183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833321, "uuid": "36791f3c-7747-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.107.225:49766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833372, "uuid": "5531e766-7747-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.68.170:57745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833375, "uuid": "56e73f84-7747-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.250.181:42535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833487, "uuid": "994caaa7-7747-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.202:40842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833544, "uuid": "bbaa0d2d-7747-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833666, "uuid": "0489e0ce-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.31.144:40896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833668, "uuid": "05bd25ee-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.155.52:51667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833694, "uuid": "15169263-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.41:57971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "4b8f035c-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "4b931d7d-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "4bae794b-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833786, "uuid": "4bb295cb-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833787, "uuid": "4c2689db-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833787, "uuid": "4c6c7826-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.42.202/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "4cd0d12c-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "4d05f6a6-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/arm6", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "4d05fbaf-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/arm7", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "4d145869-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/ppc", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "4d23646b-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.6.156:40305/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "4d40f0bd-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/mpsl", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833788, "uuid": "4d42ea70-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/gmpsl", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833789, "uuid": "4d87b1b8-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/arm", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833789, "uuid": "4dbdd221-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/arm5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833789, "uuid": "4dcec8ac-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.42.202/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833789, "uuid": "4de33c14-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "4e203e84-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.170.7:38690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "4e3c4b86-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.42.202/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "4e44e358-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "4e6ac1fb-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833790, "uuid": "4e7b1a36-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.42.202/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "4eb67646-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "4eb68c20-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/x86_64", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "4eb8541e-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/x86", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "4ecc5ad1-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.42.202/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833791, "uuid": "4f137ba3-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/mips", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833800, "uuid": "541d4180-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.174.153:38303/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833823, "uuid": "61bdbcd0-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.233.196:53954/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833824, "uuid": "623fe1cb-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.110.3:45159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833851, "uuid": "72c0763a-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.206.189:36328/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726833863, "uuid": "79ac1393-7748-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.209.154:39908/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834146, "uuid": "223abd42-7749-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.51.192.135:47417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834265, "uuid": "692d3719-7749-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.54.147.229:42874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834445, "uuid": "d46900e1-7749-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66ed33772bbe7_vdfhsjf16.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834445, "uuid": "d4c4ef55-7749-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.171.67:35702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834625, "uuid": "40195859-774a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.179.236:49183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834653, "uuid": "50d914bb-774a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.87.251.14:52193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834685, "uuid": "63b140ba-774a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.94.154.190:34361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834686, "uuid": "64433076-774a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.80.115:40782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834745, "uuid": "8783f6e3-774a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.41:57971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834869, "uuid": "d1660ef9-774a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.64.14:39644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834931, "uuid": "f63f057a-774a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.164.92:59628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834987, "uuid": "176bd1fa-774b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.68.170:57745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726834995, "uuid": "1c7ac804-774b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.130.193:42055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835166, "uuid": "829a03da-774b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.45:55682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835194, "uuid": "92f322cd-774b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.107.225:49766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835286, "uuid": "c9f7dbe7-774b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.250.181:42535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835314, "uuid": "daac3e70-774b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.120.186:38334/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835466, "uuid": "355f5140-774c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.155.52:51667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835468, "uuid": "369bc420-774c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.37.193:51338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835587, "uuid": "7d473f49-774c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.0.183:51687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835706, "uuid": "c3f49364-774c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.163/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835765, "uuid": "e74ae3fd-774c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.163/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835782, "uuid": "f16db62d-774c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.38.80:34989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835825, "uuid": "0b2fde8e-774d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66ed5659d6ee7_vcxhsdf12.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835827, "uuid": "0c0f35df-774d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.0.83:57355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835885, "uuid": "2f1704d3-774d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.203.81:35809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726835893, "uuid": "33bc3e5c-774d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.33:34500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836022, "uuid": "8084ae36-774d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.80.115:40782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "dcd277ae-774e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/f", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "dcdf1c21-774e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/l", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "dce6fe36-774e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/curl.sh", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836606, "uuid": "dcf298e2-774e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/dvr.sh", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "dd03a825-774e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/ipc", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "dd0437a2-774e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/g", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836607, "uuid": "dd1ce607-774e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/wget.sh", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726836965, "uuid": "b2e9f7f9-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.45:55682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837025, "uuid": "d63d3b5f-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/garm5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837025, "uuid": "d648a58b-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tarm", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "d75849fa-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tarm6", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "d76da38b-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/darm7", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "d794c375-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tmpsl", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "d7b70095-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/sarm6", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837027, "uuid": "d7d1f787-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tspc", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "d7fbf9ce-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/nshmpsl", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "d81839da-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tppc", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "d8207832-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tarm5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "d820c4f9-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tarc", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "d8227366-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/nsharm6", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "d83ef99b-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/smpsl", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837028, "uuid": "d8493158-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tsh4", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "d887332f-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tarm7", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "d887fdd3-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/sarm7", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "d8924547-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/garm7", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "d8c1a87b-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/garm", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "d8c4f0ff-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/darm6", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "d8c89ca6-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/darm5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "d8f0bd9e-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/zte.arm7", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837029, "uuid": "d9057b48-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/nsharm7", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "d928ab38-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/garm6", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "d948fffd-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/darm", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "d9658787-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/sarm", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "d96897b8-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/nsharm5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "d97ceade-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/sarm5", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837030, "uuid": "d98601fe-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/nsharm", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837031, "uuid": "da1f935d-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/xx", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837031, "uuid": "da3e8b1b-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/smips", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "da58d3bb-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/nshmips", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "da58dfd0-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/gmips", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837032, "uuid": "da88dfd9-774f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/tmips", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837211, "uuid": "45795253-7750-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.161.157:56729/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837331, "uuid": "8d1210c8-7750-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.12.28:54684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837386, "uuid": "adb9c7ab-7750-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.198.137:45997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837508, "uuid": "f61af9fd-7750-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.33:34500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837580, "uuid": "211ce47e-7751-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.254.182:40789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837926, "uuid": "ef9416f8-7751-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.102:43710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726837990, "uuid": "15639062-7752-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.110.37:58276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838046, "uuid": "36bc1b44-7752-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.197.80:38341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838047, "uuid": "37d050a4-7752-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.130:58278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838290, "uuid": "c8670500-7752-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.192.45:55790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838296, "uuid": "cbd6b6e9-7752-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.25.222:57816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838765, "uuid": "e3956eec-7753-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.198.137:45997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838768, "uuid": "e5567130-7753-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.89.57.93:50859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726838946, "uuid": "4f3d66e4-7754-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.8:54751/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "ddf8bbf4-7754-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.6/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "ddf8bd98-7754-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.6/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839185, "uuid": "de0be384-7754-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.6/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839366, "uuid": "4a091d51-7755-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.191.143:52383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839607, "uuid": "d93b6d4d-7755-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.110.37:58276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839668, "uuid": "fda3b471-7755-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.130:58278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839907, "uuid": "8c6dbf78-7756-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.89.57.93:50859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726839985, "uuid": "baa241e3-7756-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.68.33:43338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840026, "uuid": "d300b0aa-7756-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.192.45:55790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840026, "uuid": "d34e1a8a-7756-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.109.236:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840223, "uuid": "48b4769f-7757-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.91.180.17:55678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840386, "uuid": "a9ad7c8a-7757-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.76.191:47594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840450, "uuid": "cf9a056f-7757-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.53.41:60783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840566, "uuid": "14e68c4c-7758-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.10.199:39690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840566, "uuid": "15276098-7758-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.127:45120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840626, "uuid": "38f1e1c4-7758-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.224.72:42634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840747, "uuid": "80d6f2fc-7758-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.121.119:56867/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840867, "uuid": "c855b799-7758-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.85.112:43030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726840925, "uuid": "eb3d7b3a-7758-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.68.33:43338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841046, "uuid": "32e697ab-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.191.143:52383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841046, "uuid": "332228f5-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.60/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841106, "uuid": "571153eb-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.60/arm7", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841107, "uuid": "574ae9c1-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.60/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841165, "uuid": "7a3700bb-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66ed8059174df_ConsiderMilfs.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841165, "uuid": "7a4f4f6e-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66ed7ef071886_crypted.exe#1", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841231, "uuid": "a15a5942-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.195.45:40685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841231, "uuid": "a16917fd-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.167:50554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841345, "uuid": "e548ad84-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.85:50505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841347, "uuid": "e6b583a9-7759-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.225.227:47570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841472, "uuid": "30ba72c0-775a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.74.46.32:51607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841529, "uuid": "52bfd0cd-775a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/doun/game.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841532, "uuid": "548455c7-775a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.170.251:35551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841539, "uuid": "590bd2c0-775a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.130.65:43265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841591, "uuid": "780774d0-775a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.138.53:59526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841833, "uuid": "0826d340-775b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.91.180.17:55678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841890, "uuid": "2a4ce9e2-775b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.183.42:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726841974, "uuid": "5c867909-775b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.76:55442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842007, "uuid": "6fcccce6-775b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.53.41:60783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842065, "uuid": "92669bf9-775b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.10.199:39690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842065, "uuid": "92af5d32-775b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.197:39241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842307, "uuid": "22bf3367-775c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.224.72:42634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842308, "uuid": "230ef98b-775c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.121.119:56867/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842308, "uuid": "23345ff1-775c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.72.252:41546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842372, "uuid": "49b4cff0-775c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.181.66:43878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842441, "uuid": "72698178-775c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.25:46780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842547, "uuid": "b19d71fc-775c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.183.247:50661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842667, "uuid": "f9723e3a-775c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/jbG3cpmy", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842726, "uuid": "1cb45060-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.225.227:47570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842787, "uuid": "40a67ba3-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/test/no.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842787, "uuid": "40ab7d42-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/test/do.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842787, "uuid": "40f14b78-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/test/file.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842789, "uuid": "41d20186-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.85:50505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842789, "uuid": "420d08e8-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/mine/random.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842789, "uuid": "422941aa-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/well/random.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842789, "uuid": "422f751d-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/test/wels.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842790, "uuid": "427d664b-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/steam/random.exe", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842798, "uuid": "477a3235-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.103/test/random.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842848, "uuid": "652fd98e-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.183.247:50661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842906, "uuid": "87c8b4a1-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.60/sh", "Tag": [ { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842909, "uuid": "895959ff-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.63.25:33802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842964, "uuid": "aa8cfb6c-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.60/clean", "Tag": [ { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726842965, "uuid": "aadf77fb-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.60/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726843028, "uuid": "d06cbdf8-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.138.53:59526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726843095, "uuid": "f87472b8-775d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.132.178:50258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726843566, "uuid": "11036077-775f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.183.109:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726843569, "uuid": "13262ffa-775f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.38.131:34408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726843695, "uuid": "5e487108-775f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.133.20:38851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726843866, "uuid": "c3d54445-775f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.72.252:41546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726843986, "uuid": "0ba8c232-7760-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.88.157:47139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844345, "uuid": "e19589b1-7760-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.76:55442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844345, "uuid": "e19924bb-7760-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.195.45:40685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844587, "uuid": "719f7c2d-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.53:36451/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844587, "uuid": "71e8559f-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.34.193:48971/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844589, "uuid": "72d7e06e-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.232.35:32898/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844592, "uuid": "7478124b-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.106.170:50076/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844596, "uuid": "775272cb-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.11.139:51149/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844600, "uuid": "79411652-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.43.165:47282/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844600, "uuid": "795ee6c2-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.253.60:32978/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844606, "uuid": "7d21f983-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.158.159.243:41597/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844607, "uuid": "7dc387f0-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.23.5:35583/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844614, "uuid": "81b1f340-7761-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.4.124:57959/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726844946, "uuid": "477acc1a-7762-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.155.66:42671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845426, "uuid": "65d01a60-7763-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.133.20:38851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845429, "uuid": "678f5f1d-7763-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.82:57949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845545, "uuid": "ac83c1e2-7763-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.88.157:47139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845545, "uuid": "ac9df1d6-7763-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.220.162.38:56754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845725, "uuid": "184a12d2-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/log/n104_log/sd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845726, "uuid": "186e6aab-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/log/n104_log/s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845726, "uuid": "188e4ddb-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/log/n104_log/udp/s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845786, "uuid": "3c4300d1-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/log/netis/shell", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845786, "uuid": "3c4828db-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/log/netis/ki", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845786, "uuid": "3c7d5fff-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/log/netis/s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726845907, "uuid": "84b97e16-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.162.168:59094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846025, "uuid": "ca945fef-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://pelentions.com/MlCs/caldo.png", "Tag": [ { "name": ".net", "colour": "#b405c4", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false }, { "name": "JanelaRat", "colour": "#00fadb", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846025, "uuid": "cae38e7b-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.134.32.38:38628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846026, "uuid": "cb9d2a5f-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.77:50557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "ef7c5571-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/sh4.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "ef8107fa-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/zeros6x.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "ef96cf6e-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/lol.sh", "Tag": [ { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "ef998981-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/lol", "Tag": [ { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "ef9bb594-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/m68k.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efa00b14-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/powerpc.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efd780c8-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/sparc.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efdfd270-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/zte", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efdfd516-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/gpon443", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efe13044-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/realtek", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efe7b191-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efe9478e-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/zyxel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "efecd3e4-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/goahead", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "eff78834-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/aws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "f0022d7e-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/lg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846087, "uuid": "f008cabb-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/thinkphp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846088, "uuid": "f024031d-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/jaws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846088, "uuid": "f04f89f0-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.113/huawei", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846088, "uuid": "f09dc694-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/x86_64.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "f0b33a59-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/x86_32.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "f0bf41e1-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/mips.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "f0e0bc6d-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/arm.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "f0e911bb-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/arm5.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "f0ef5dbf-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/arm6.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "f0f89255-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/arm7.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846089, "uuid": "f1113a3e-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.232/mipsel.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846090, "uuid": "f1620cc6-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/boobs.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846114, "uuid": "ffaa92cb-7764-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.17.169/t", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846146, "uuid": "131e2155-7765-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.133.255:41926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846212, "uuid": "3a35e33e-7765-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.167:50554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846212, "uuid": "3a69105f-7765-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.22.177.142:59813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846267, "uuid": "5b46b3b3-7765-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.168.131:43005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846329, "uuid": "7fc1353e-7765-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.11.77:47248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846387, "uuid": "a2cc1f03-7765-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.82:57949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846458, "uuid": "cceb9e40-7765-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.113.155:38110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726846508, "uuid": "ea6edbfc-7765-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.84:51124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847165, "uuid": "722e9930-7767-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.134.32.38:38628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847194, "uuid": "838c90f1-7767-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.220.162.38:56754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847407, "uuid": "02d5f957-7768-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.179.40:41358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847466, "uuid": "25c5d853-7768-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.162.168:59094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847466, "uuid": "2601c1f8-7768-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66ed9885d9aee_Day2.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847467, "uuid": "26218877-7768-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.152.69:37800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847586, "uuid": "6d20dbec-7768-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.35.22:37004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847644, "uuid": "8ffcb9d7-7768-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.133.255:41926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847783, "uuid": "e2cb49e2-7768-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.144.102:60027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726847955, "uuid": "494c3051-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.95.159:33405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848009, "uuid": "69382930-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.84:51124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848066, "uuid": "8b9d3eda-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "8bb7a578-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/gpon.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "8bc29baa-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.169.174:40562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "8bc3102c-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/i686nk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "8bd71e27-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848067, "uuid": "8be09f2c-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "aedd5873-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/mipselnk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "aef9e5b6-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "af0b80a4-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/arm5nk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848126, "uuid": "af5b0505-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/armnk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b029ac8a-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b0388a75-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/arm7nk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b03bdf9d-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/i586nk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b04252b2-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/arm6nk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b04793c0-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/mipsnk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b0585caf-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b058d9a9-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/x86_64nk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b0642e84-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b068da7c-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848128, "uuid": "b07e69f8-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.14.226.28/arleigjfsdg/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848244, "uuid": "f59777ba-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/lol.sh", "Tag": [ { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848244, "uuid": "f5abf269-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/lol", "Tag": [ { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848245, "uuid": "f5d5b923-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/x86_32.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848245, "uuid": "f5d74afb-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/powerpc.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848245, "uuid": "f62f4b20-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/sh4.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848246, "uuid": "f671152f-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/m68k.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848246, "uuid": "f6d4f843-7769-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.61/sparc.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848440, "uuid": "6a0de709-776a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.99.253:41694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848441, "uuid": "6abe78d7-776a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.222.79:46936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848613, "uuid": "d17d6ce8-776a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/aa/sys_deamon", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848613, "uuid": "d18e0006-776a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/aa/dvr.zip", "Tag": [ { "name": "dvr", "colour": "#2fdef6", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848614, "uuid": "d1e19acf-776a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.185.79/aa/f", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726848859, "uuid": "643efed1-776b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.252.172:35752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849025, "uuid": "c70fe584-776b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.199:38316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849086, "uuid": "eb7de4a6-776b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/revada/66ed9f86292a3_setup3333.exe#lyla", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849103, "uuid": "f557a461-776b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.19.205:39090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849207, "uuid": "33a8b43d-776c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.152.69:37800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849208, "uuid": "33e62aaf-776c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.96.148:54079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726849209, "uuid": "348edbf1-776c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.47.70:48423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850346, "uuid": "da1110d0-776e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.18.231:48697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850408, "uuid": "ff54e3b6-776e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.11:47525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850589, "uuid": "6b2cee70-776f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.47.70:48423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850645, "uuid": "8c6c4ece-776f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.96.148:54079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850706, "uuid": "b0c868b6-776f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.179.99:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726850765, "uuid": "d456d33f-776f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.22:54014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851148, "uuid": "b88adbe0-7770-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.250.18:34740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851195, "uuid": "d46ef3e9-7770-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.26.99:39295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851217, "uuid": "e166b44e-7770-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.249.35:37038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851308, "uuid": "17898d86-7771-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.58.17:56250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851666, "uuid": "ed33cf61-7771-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.18.231:48697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851667, "uuid": "edbd1922-7771-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.183:56912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "9ec0d4ae-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "9eeb1e4a-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "9ef1e3c1-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851964, "uuid": "9ef370e5-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "9f3b7656-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "9f59f7a4-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "9f5d18ba-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "9f679ccf-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "9f86869d-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851965, "uuid": "9f8de97f-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "9fd8e756-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "9fd938b2-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "9ff69dec-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "9ffe7eca-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "a009ef51-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "a01184e9-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins/hoho.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851966, "uuid": "a03b464a-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851967, "uuid": "a06fad77-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851967, "uuid": "a07cf176-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851967, "uuid": "a08ddf8f-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726851967, "uuid": "a0908a76-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins/hoho.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852084, "uuid": "e626852b-7772-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.34.97/bins_download.sh", "Tag": [ { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852145, "uuid": "0aa5d4f5-7773-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://dedify.de/bins_download.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "hoho", "colour": "#2d551b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852327, "uuid": "775facba-7773-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.138.220:44251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852512, "uuid": "e5287338-7773-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.131.151:40594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852512, "uuid": "e573388c-7773-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.66:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852686, "uuid": "4cfb6a03-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.11:47525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852752, "uuid": "74794d38-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.103:41572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852807, "uuid": "94f7cc34-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.26.99:39295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852871, "uuid": "bb2f37b2-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/dev.jpg", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852889, "uuid": "c5ed260d-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/cpu/nanominer-linux-3.7.7.tar.gz", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "NanoMiner", "colour": "#c5325e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852901, "uuid": "ccf10c0c-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/cpu.jpg", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852984, "uuid": "fef454b2-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/lan/ps2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852984, "uuid": "fefc4d19-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/2023", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852986, "uuid": "ffb53dca-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/test.jpg", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852986, "uuid": "fff7c559-7774-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/.c/loginclientbot", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852990, "uuid": "02562678-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.112.73.102:57320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726852994, "uuid": "04b1230e-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/jbrute", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853005, "uuid": "0b5aac71-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/lan.jpg", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853045, "uuid": "22eab328-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/lan/start", "Tag": [ { "name": "bruteforce", "colour": "#de303d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853047, "uuid": "24028419-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.45.15:44817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853107, "uuid": "47e05dbc-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.183:56912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "6a660cc2-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/last", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "6a7c5759-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/dr.jpg", "Tag": [ { "name": "CVE-2016-5195", "colour": "#D8D4DD", "exportable": true, "hide_tag": false }, { "name": "DirtyCow", "colour": "#E3CBBF", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "6a95a053-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/cpu/cpu.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853165, "uuid": "6ab352b8-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/iptables", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853166, "uuid": "6b0b8de2-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/install", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853225, "uuid": "8e3c0143-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/juiceseif.jpg", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853344, "uuid": "d58868be-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/mig", "Tag": [ { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853346, "uuid": "d64ad0c9-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.114.43:38796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853408, "uuid": "fb52beac-7775-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/i.fake", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853504, "uuid": "34e89a86-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/lan/jbrute", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853735, "uuid": "be46cf38-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.56/nvidia/system", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "d00e221e-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853765, "uuid": "d01edd5f-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.59/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853766, "uuid": "d09068a2-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.92/done/killua.x86", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853766, "uuid": "d090a032-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.92/done/killua.arm7", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853766, "uuid": "d0a63630-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.92/done/killua.x86_64", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853766, "uuid": "d0a6bc86-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.92/done/killua.arm5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853767, "uuid": "d1a39eee-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.92/done/killua.arm6", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726853767, "uuid": "d1a3db0b-7776-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.92/done/killua.mips", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854245, "uuid": "ee80a7d0-7777-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.116.238:37787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854307, "uuid": "13447d35-7778-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.92/done/killua.arm4", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854365, "uuid": "36024b15-7778-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.71.92/done/killua.mipsel", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854426, "uuid": "5a2eb842-7778-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.103:41572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854554, "uuid": "a6a8a4c9-7778-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.108.1:58358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854607, "uuid": "c636b380-7778-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.220.251:51132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854667, "uuid": "e993293b-7778-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.45.15:44817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854726, "uuid": "0cf04532-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854726, "uuid": "0cf0f28e-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854726, "uuid": "0d0732d6-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854726, "uuid": "0d0bdf5a-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854726, "uuid": "0d0ca3fd-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854726, "uuid": "0d237dec-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854726, "uuid": "0d2e96ba-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "0d5fe4f5-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "0d6540ef-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "0d6fbe46-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "0d7b8714-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.172.70.35/downloads/nc.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "netcat", "colour": "#c53a03", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "0d875996-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854727, "uuid": "0de91a24-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854728, "uuid": "0def1a6f-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854728, "uuid": "0e017c2a-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854728, "uuid": "0e11c069-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://echo-c2.kro.kr/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854731, "uuid": "1007dd9b-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.172.70.35/downloads/winPEASx64.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854906, "uuid": "789880b4-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://hacker.eliron-networks369.org/done/killua.mipsel", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854907, "uuid": "78aa204b-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://hacker.eliron-networks369.org/done/killua.arm5", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854907, "uuid": "791056f2-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://hacker.eliron-networks369.org/done/killua.arm7", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854908, "uuid": "793bdc15-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://hacker.eliron-networks369.org/done/killua.x86_64", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854908, "uuid": "799d38ac-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://hacker.eliron-networks369.org/done/killua.arm6", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854909, "uuid": "79f49e2b-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://hacker.eliron-networks369.org/done/killua.x86", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854909, "uuid": "7a0cfc1f-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://hacker.eliron-networks369.org/done/killua.mips", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726854909, "uuid": "7a24170a-7779-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://hacker.eliron-networks369.org/done/killua.arm4", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855144, "uuid": "062df518-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sora", "colour": "#5650be", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855144, "uuid": "06366283-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sora", "colour": "#5650be", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855207, "uuid": "2b8fb808-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855207, "uuid": "2b9593e1-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855209, "uuid": "2cbe3575-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.75/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855386, "uuid": "964ef498-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.80.186:37450/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855386, "uuid": "9656b4df-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.85:49991/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855387, "uuid": "96f027e6-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.28:57190/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855389, "uuid": "9808d40f-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.153.71:53249/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855389, "uuid": "987925c2-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.170.185:51596/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855390, "uuid": "988925c5-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.46.7:40042/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855390, "uuid": "98c654d3-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.109.33:58031/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855390, "uuid": "990caaed-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.21.95:35207/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855391, "uuid": "993d1ebd-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.69.65:33802/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855391, "uuid": "9947d3c0-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.27.108:59660/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855395, "uuid": "9ba99995-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.200.165:55248/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855395, "uuid": "9c0956e1-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.181.205:47903/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855396, "uuid": "9c9f67b6-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.61.122:42169/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855397, "uuid": "9cfa9a8c-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.27.138:35583/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855398, "uuid": "9db6e9a0-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.138.159:51840/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855399, "uuid": "9e06eca3-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.211.12:51335/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855407, "uuid": "a31f6d7c-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.200.87.230:53343/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855414, "uuid": "a6f5bdfc-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.230.66.134:10718/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855419, "uuid": "aa2ffba1-777a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.225.12:60206/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855686, "uuid": "48fd09fb-777b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.116.238:37787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855745, "uuid": "6c3db3ef-777b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66edb89bc4073_crypted.exe#xin", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726855987, "uuid": "fc5d35f2-777b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.99.253:41694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856166, "uuid": "674a2f39-777c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.233.240:55483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856291, "uuid": "b1b58d08-777c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.88.24:57877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856291, "uuid": "b1df8be3-777c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.171.179:51173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856407, "uuid": "f6cc4119-777c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.220.251:51132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856651, "uuid": "88711216-777d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.60.122:38558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856885, "uuid": "13bc2f89-777e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.63.107:41491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726856885, "uuid": "13d56ed9-777e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.50:38118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857186, "uuid": "c706bcde-777e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.52:58056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857248, "uuid": "ec78d535-777e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.4.133:47848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857727, "uuid": "097968ce-7780-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.108.224:48116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857966, "uuid": "985182d1-7780-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.233.240:55483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857966, "uuid": "98620350-7780-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.171.179:51173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726857966, "uuid": "98700e06-7780-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.148:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726858026, "uuid": "bbae150d-7780-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.22:39161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726858085, "uuid": "df5a1780-7780-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.60.122:38558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726858512, "uuid": "dd7f8754-7781-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.106.131:33373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726858569, "uuid": "ffec9fd4-7781-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.110.105:44416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726858810, "uuid": "8f5bb1fa-7782-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.108.84:37248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859345, "uuid": "ce559a59-7783-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.4.168:58717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859886, "uuid": "10815d4c-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.110.105:44416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726859945, "uuid": "340de3d1-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.99:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "c960e273-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/MPA.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "c97e9f50-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Qmtesbydmu.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860196, "uuid": "c991cb20-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Xcwyh.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "c9bd4296-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Puvgcp.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "c9e2576f-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Rbakrrsu.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "ca0cba8e-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Wvfkscxgxt.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "ca228b91-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Plwoz.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860197, "uuid": "ca387234-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Uqulizpa.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca4d5594-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Hzpvqnce.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca4f5f14-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Kqowfud.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca5fb146-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Xesvonogy.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca633429-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Nykpie.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca6aa5f3-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Owxqirgmz.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca74827d-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Hbdembnub.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca81e22d-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Awxsberfen.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca84d66f-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Byhvhgyeksi.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca8c2af3-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Youwdrvtmk.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "ca9f5cc0-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Xzihkh.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "caa37f9b-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Vxxoti.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "cab3de85-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Pqwzpu.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "cab5d6fa-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Edjikgn.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "cabf0d1e-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Uaeaqcjxuw.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "cac95bc4-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Orqxpbwksd.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "cad40c5e-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Zjtlosu.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860198, "uuid": "cae05dac-7785-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.25.72.207/ARMAF/Pzectvsounu.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860307, "uuid": "0b91adf0-7786-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.106.131:33373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860365, "uuid": "2e42dafb-7786-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.9.107:57661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860366, "uuid": "2e9d9fab-7786-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.108.84:37248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860611, "uuid": "c0ad9c55-7786-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.109.57.158:35743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860668, "uuid": "e2bb00a6-7786-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.175.75:38690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860846, "uuid": "4cb11e69-7787-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/revada/66edcd212760d_set3.exe#lyla", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726860908, "uuid": "71875a8a-7787-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.4.168:58717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861025, "uuid": "b7bac84a-7787-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.145.196:40753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861026, "uuid": "b8467b77-7787-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.225.235:34033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861067, "uuid": "d0417356-7787-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.80.108:45079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861445, "uuid": "b1ff5564-7788-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.109.57.158:35743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861593, "uuid": "0a551c4e-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.26.64:35885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861750, "uuid": "6762c17b-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.236.111:44580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861807, "uuid": "89a5299c-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.9.107:57661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861807, "uuid": "89e0bc63-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.16.189:44901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861926, "uuid": "d099e404-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.216.17:48950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861991, "uuid": "f707a49a-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/log/netis/ki", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861991, "uuid": "f738c69d-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/aa/sys_deamon", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861991, "uuid": "f750222e-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/log/netis/shell", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861991, "uuid": "f7704b27-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/log/n104_log/sd", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861991, "uuid": "f778bf02-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/aa/f", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861991, "uuid": "f798178c-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/aa/dvr.zip", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861992, "uuid": "f7b1538f-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/log/n104_log/s", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726861992, "uuid": "f7ebc57c-7789-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/log/n104_log/udp/s", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862045, "uuid": "178f4ac8-778a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://af.peertube.red/log/netis/s", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862057, "uuid": "1e925b1b-778a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.94.206:43302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862285, "uuid": "a6ae1599-778a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://myugu.therapy.emergencepsychservices.com/orderReview", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862408, "uuid": "efd4bb56-778a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.145.196:40753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862467, "uuid": "12f89338-778b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.191.184:52504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862646, "uuid": "7d8def49-778b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.142.178:37249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862765, "uuid": "c4b093a5-778b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.225.235:34033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862825, "uuid": "e8a82186-778b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.42:34632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862828, "uuid": "e9eb54d3-778b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.3.75:51950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862885, "uuid": "0c040fc4-778c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.176.18:50508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726862946, "uuid": "304a6b10-778c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.0.234:48886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863008, "uuid": "55a5c9e1-778c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.112.43:54826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863608, "uuid": "bb0fe4cb-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.91.253:45070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863665, "uuid": "dd378d5f-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.51.192.135:47417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863666, "uuid": "dde874d4-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.139.161:45065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df551305-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/nbot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df554275-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/mixbot.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df56d2e7-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/nbot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df58be59-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/mixbot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df612faa-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/nbot.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df63d519-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/nbot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df74e667-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/mixbot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df877deb-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/mixbot.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "df9a334f-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/nbot.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "dfa20436-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/nbot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "dfa2e056-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/nbot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863669, "uuid": "dfaa1877-778d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/nbot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "015583ff-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/ofc.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "0162dab5-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/ofc.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "0165c60c-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/ofc.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "0176962d-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/ofc.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "0178fd56-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/ofc.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "0178fe5d-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/ofc.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863726, "uuid": "017ee225-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/ofc.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863727, "uuid": "01d3027c-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.24.85.58:46191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863727, "uuid": "01d4a371-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/ofc.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863785, "uuid": "24d5d957-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/offon.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863785, "uuid": "24e125c3-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.yflogistics.net:8081/offon.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863786, "uuid": "24f905b8-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/offon.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863786, "uuid": "251999c1-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://yflogistics.net:8081/offon.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863844, "uuid": "47cc084d-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/nbot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863844, "uuid": "47cf2583-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/mixbot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863844, "uuid": "47d5bdcd-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/nbot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863844, "uuid": "47da6b9b-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/nbot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863844, "uuid": "47da77f7-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/mixbot.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863844, "uuid": "47f24eef-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/nbot.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863906, "uuid": "6cfcd2bd-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/ofc.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863907, "uuid": "6d0e82e8-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/offon.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863907, "uuid": "6d0e8742-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/offon.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863907, "uuid": "6d18136e-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/ofc.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863907, "uuid": "6d190f40-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/ofc.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726863907, "uuid": "6d197393-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.27.121.146:8081/ofc.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864085, "uuid": "d78e8edc-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864085, "uuid": "d791b199-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d7d3f524-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d805864e-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d80ade6b-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d815213d-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d81a40c6-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d82b39f4-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d8373174-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d83a2313-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864086, "uuid": "d83c1a66-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/yakuza.x32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864144, "uuid": "fae18ab0-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.169.233.237/bins.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864146, "uuid": "fbf86ec2-778e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.89.63:54499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864267, "uuid": "43e2cc30-778f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.142.178:37249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864386, "uuid": "8aba5678-778f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.197.97:56412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864506, "uuid": "d27984e3-778f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.176.18:50508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864510, "uuid": "d47d0d61-778f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.175.143:41273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864747, "uuid": "62366f0a-7790-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.43.107:32948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864806, "uuid": "8566cb34-7790-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.168.131:43005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864866, "uuid": "a8bbf24d-7790-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.91.253:45070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864880, "uuid": "b16d4342-7790-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.229.207:50010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726864995, "uuid": "f60229b0-7790-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.139.222:32836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "1434e367-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "14512fc6-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "145b5477-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "146ec378-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865046, "uuid": "14784154-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865048, "uuid": "1577b566-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865048, "uuid": "1579a3f4-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865106, "uuid": "381d91f8-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865106, "uuid": "3824f8e4-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.122/hidakibest.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865107, "uuid": "38ce4a9b-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.43.182:40288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865139, "uuid": "4bdbd3dd-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.145:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865181, "uuid": "64f46cc3-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.139.161:45065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865346, "uuid": "c6d128eb-7791-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.84.6:51558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865525, "uuid": "31ec2f8d-7792-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.201:52607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865525, "uuid": "31fa8c90-7792-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.12.226:52027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865646, "uuid": "799850cb-7792-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.89.63:54499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865707, "uuid": "9e65e127-7792-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.197.160.40:41092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865825, "uuid": "e4a193a5-7792-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.197.97:56412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726865952, "uuid": "30620427-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.199.62:58700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866009, "uuid": "51eb98c3-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.23.37:38966/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866186, "uuid": "bbdd630a-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.101.19:59905/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866189, "uuid": "bdb1f819-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.138:50972/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866221, "uuid": "d072a237-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.64.226.60:56054/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866245, "uuid": "def59666-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.1.50:46416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866245, "uuid": "df07a757-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.84.6:51558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866245, "uuid": "df0ad5a6-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.203.81:35809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866279, "uuid": "f348b7df-7793-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.246.73:56255/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866305, "uuid": "02d8d01d-7794-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.52.167/mpslbot", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866306, "uuid": "02fd0606-7794-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.52.167/mipsbot", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726866908, "uuid": "69e97ff9-7795-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.172.244:34037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867026, "uuid": "b02deaa5-7795-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://nerv.com.pe/vfsdgdf.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867026, "uuid": "b05b0a90-7795-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://nerv.com.pe/sdhsfd.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867145, "uuid": "f77d9863-7795-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.201:52607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867207, "uuid": "1c4460e2-7796-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.179.25:49694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867326, "uuid": "632f8a98-7796-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.3.75:51950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867565, "uuid": "f1ec4f90-7796-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.23.37:38966/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867566, "uuid": "f247f960-7796-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.232.47:60006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867809, "uuid": "82e8b925-7797-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.1.50:46416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726867867, "uuid": "a595ee77-7797-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.161.174:39815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868407, "uuid": "e7424a01-7798-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.11:35708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868540, "uuid": "36d70dd4-7799-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.69.189:36430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868708, "uuid": "9ada93e9-7799-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.172.244:34037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868708, "uuid": "9af09d97-7799-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.113.90:39606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868709, "uuid": "9b55e212-7799-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.79.28:46286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726868736, "uuid": "abbe2aa5-7799-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.102:48424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869007, "uuid": "4cf46ee3-779a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.179.25:49694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869066, "uuid": "705bbc8b-779a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://nerv.com.pe/vfdhfgw12.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869131, "uuid": "96cf4f2f-779a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.197.208:46729/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869307, "uuid": "ffb3be67-779a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.161.174:39815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869307, "uuid": "ffc191c5-779a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.0.234:48886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869307, "uuid": "ffdd0079-779a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.89:60000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869307, "uuid": "fffb49a4-779a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.213.14:49662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869381, "uuid": "2c264a61-779b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.88.71:56933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869487, "uuid": "6b8f89d4-779b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.53.154:59963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869546, "uuid": "8e6ae32c-779b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.190.104:42364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869866, "uuid": "4d36d710-779c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.91.130:52728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726869907, "uuid": "6582d0f1-779c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.11:35708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870270, "uuid": "3e339635-779d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.119.113.152/CITROEN.msi", "Tag": [ { "name": "bazaloader", "colour": "#472954", "exportable": true, "hide_tag": false }, { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false }, { "name": "Latrodectus", "colour": "#ba6b84", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870446, "uuid": "a6bd85c7-779d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.61.164:50623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870461, "uuid": "aff64d7a-779d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.102:48424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870468, "uuid": "b42922c4-779d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.62.100:45989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870572, "uuid": "f1dbed0a-779d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.194.92:39180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870626, "uuid": "1202efb3-779e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.178.128:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870627, "uuid": "12fc2d2d-779e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.plantytime.com/CITROEN.msi", "Tag": [ { "name": "bazaloader", "colour": "#472954", "exportable": true, "hide_tag": false }, { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false }, { "name": "Latrodectus", "colour": "#ba6b84", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870627, "uuid": "12fc6e5d-779e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://plantytime.com/CITROEN.msi", "Tag": [ { "name": "bazaloader", "colour": "#472954", "exportable": true, "hide_tag": false }, { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false }, { "name": "Latrodectus", "colour": "#ba6b84", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726870994, "uuid": "ed923940-779e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.181.232:49812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871059, "uuid": "142816ef-779f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.110:53302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871110, "uuid": "32ec033b-779f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.27.48:48333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871176, "uuid": "59ff23c1-779f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.8.10:58611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871345, "uuid": "becadb84-779f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.185.105:47836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871469, "uuid": "08ab4480-77a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.254.159:36884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871480, "uuid": "0f45461d-77a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.209.39:58831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871528, "uuid": "2b8ebecd-77a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/doun/game.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871588, "uuid": "4f74ef0e-77a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.172.150:34758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871647, "uuid": "72ea8bac-77a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.19.237:55109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871715, "uuid": "9b6ff04f-77a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.122.9:48203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871719, "uuid": "9dc244b8-77a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.249.243:44650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871825, "uuid": "dc8fb5e3-77a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.79.28:46286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871885, "uuid": "0099aa9f-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/0d60be0de163924d/vcruntime140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871886, "uuid": "0103ff40-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/0d60be0de163924d/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871886, "uuid": "0115c83b-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/0d60be0de163924d/freebl3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871886, "uuid": "01182f35-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/0d60be0de163924d/mozglue.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871886, "uuid": "01276ec8-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/0d60be0de163924d/softokn3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871886, "uuid": "0179b6e1-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/0d60be0de163924d/msvcp140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871888, "uuid": "025b7984-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/0d60be0de163924d/nss3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726871946, "uuid": "24bef55b-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.62.178:34035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872007, "uuid": "49358118-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/test/do.ps1", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872007, "uuid": "4951f241-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/test/no.ps1", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872007, "uuid": "496dacc9-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/test/file.cmd", "Tag": [ { "name": "cmd", "colour": "#965958", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872009, "uuid": "4ab12254-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/mine/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872010, "uuid": "4af39610-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/steam/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872010, "uuid": "4b520465-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/well/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872010, "uuid": "4b56db56-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/test/wels.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872011, "uuid": "4b69b993-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.37/test/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872126, "uuid": "9033e1fe-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.62.100:45989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872246, "uuid": "d7b1a4ae-77a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.33:42658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872315, "uuid": "00b61fd5-77a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.133.218:48538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872365, "uuid": "1eebc74c-77a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.32.201:49611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872366, "uuid": "1f1f4362-77a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.89:60000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872425, "uuid": "429654a9-77a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.87.211:36575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872547, "uuid": "8b417b0e-77a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.180.147:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872628, "uuid": "bb47b709-77a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.251.223:51453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872846, "uuid": "3d98d6ac-77a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://nerv.com.pe/vdshgdf16.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872907, "uuid": "61fed2cc-77a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.209.39:58831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726872908, "uuid": "622e28b0-77a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.45.229:48548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873085, "uuid": "cb98680e-77a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.213.14:49662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873085, "uuid": "cc0b5a4e-77a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.47:35830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873156, "uuid": "f607f69d-77a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.150.71:43349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873173, "uuid": "0051ab73-77a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.254.159:36884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873210, "uuid": "167b21ef-77a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.10.18.202:60598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873280, "uuid": "3fcd9048-77a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.194.15:43688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873386, "uuid": "7f76148a-77a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.202.83:53422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873626, "uuid": "0e5bb9a3-77a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.114.43:38796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873627, "uuid": "0f24e79b-77a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.180:36188/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873685, "uuid": "31b85601-77a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.99.61:57388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726873927, "uuid": "c177e234-77a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.22.215:52714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874227, "uuid": "743df38c-77a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.251.223:51453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874346, "uuid": "bb8035cd-77a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.22.215:52714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874408, "uuid": "e06f751f-77a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.162:55997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874408, "uuid": "e0721dba-77a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.115.237:43011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874467, "uuid": "0385db8c-77a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.43.26:33343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874541, "uuid": "2ff25fc2-77a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.238.116:60825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874586, "uuid": "4a430e70-77a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.208.89:55581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874603, "uuid": "54ee1df7-77a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.217.221:57534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874645, "uuid": "6dd4abab-77a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.47:35830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874707, "uuid": "92a3e99f-77a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.196.65:48601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726874765, "uuid": "b566d05f-77a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.151.122:55401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875010, "uuid": "477a202f-77a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.118.78:58411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875067, "uuid": "69341ef5-77a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.194.15:43688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875128, "uuid": "8d550375-77a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.10.18.202:60598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875187, "uuid": "b06e8422-77a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.175.181:42110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875426, "uuid": "3f306fc4-77a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://nerv.com.pe/vsfdhgg15.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875485, "uuid": "6228bf8f-77a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.211.175:48789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875621, "uuid": "b37d590a-77a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.243.126:50982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875785, "uuid": "156f0ab0-77aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.43.182:40288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875908, "uuid": "5e59ff05-77aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.111:46111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875965, "uuid": "80b8d76c-77aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.79:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726875966, "uuid": "80c5b78b-77aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.202.137:39991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726876025, "uuid": "a47a7bd7-77aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.208.89:55581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726876146, "uuid": "ec16b78a-77aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.115.237:43011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726876207, "uuid": "107fa36e-77ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.189.73:54464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726876217, "uuid": "16f0a061-77ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.189.148:56485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726876507, "uuid": "c390ada0-77ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.196.65:48601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726876509, "uuid": "c4988ac6-77ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.124.176:43216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726876626, "uuid": "0a4909c3-77ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.175.181:42110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1726876745, "uuid": "5146e107-77ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.211.175:48789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc5a150-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.106.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "9506ce58-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.200.87.230", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833783, "uuid": "4a2f0ba9-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.233.196", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790584, "uuid": "b5325a8f-76e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.233.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840206, "uuid": "3e2286b4-7757-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.91.180.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806845, "uuid": "91d43613-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "108.181.157.69", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "younglotus", "colour": "#70a934", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726828325, "uuid": "94badf5b-773b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.232.174.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848423, "uuid": "606fde25-776a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.99.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726814944, "uuid": "6cd346ea-771c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.67.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806244, "uuid": "2b4aa278-7708-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.188.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806483, "uuid": "ba1694ef-7708-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.202.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813444, "uuid": "eee2a617-7718-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.154.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849206, "uuid": "3298bbb4-776c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.96.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796463, "uuid": "65ac5ed1-76f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.236.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813323, "uuid": "a70c34d9-7718-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.118.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798985, "uuid": "4489c82d-76f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.77.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726858563, "uuid": "fc1a3b31-7781-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.110.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818723, "uuid": "399ecfdf-7725-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.251.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807323, "uuid": "aee81a79-770a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.100.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796823, "uuid": "3c587801-76f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.243.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840563, "uuid": "137e51c3-7758-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.27.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820343, "uuid": "ff494d90-7728-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.78.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863605, "uuid": "b99108de-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.91.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830724, "uuid": "2a71353b-7741-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.65.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726805463, "uuid": "5a45e00a-7706-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.93.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812123, "uuid": "dbcfa4ac-7715-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.45.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835585, "uuid": "7be6dce4-774c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.0.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807924, "uuid": "14f19d14-770c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.106.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726827123, "uuid": "c89cb8ae-7738-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.20.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820883, "uuid": "4146dd33-772a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.26.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726795504, "uuid": "29ff39a4-76ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.193.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866184, "uuid": "ba6d48be-7793-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.101.19", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811043, "uuid": "57f1e298-7713-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.132.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837384, "uuid": "ac40e32e-7750-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.198.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810384, "uuid": "cee0c802-7711-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.79.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810208, "uuid": "6652d6db-7711-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.99.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794124, "uuid": "f33e4205-76eb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.153.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726805104, "uuid": "840d8c3b-7705-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.155.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818605, "uuid": "f37f74c9-7724-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.94.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841223, "uuid": "9cdce5d9-7759-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.10.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840443, "uuid": "cbde81e0-7757-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.53.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867205, "uuid": "1b17997a-7796-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.179.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841463, "uuid": "2becac85-775a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.74.46.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798563, "uuid": "498aa783-76f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.36.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806006, "uuid": "9d8fb36c-7707-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.108.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806724, "uuid": "49b7e0c1-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.130.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "95069ac9-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.138.159", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864984, "uuid": "ef42837c-7790-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.139.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829823, "uuid": "11a8fa7c-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.151.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833783, "uuid": "4a308a5d-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.174.153", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817706, "uuid": "db5bedb3-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.249.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875605, "uuid": "a9db7c65-77a9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.243.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837563, "uuid": "1759eb2d-7751-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.254.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820944, "uuid": "653b632e-772a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.254.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726795623, "uuid": "710f7b0c-76ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.61.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726793224, "uuid": "dae0544e-76e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.100.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837205, "uuid": "41db5cbc-7750-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.161.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834923, "uuid": "f1748bf6-774a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.164.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864505, "uuid": "d1928577-778f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.175.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819684, "uuid": "763748bf-7727-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.175.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821724, "uuid": "361ae4c2-772c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.175.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865705, "uuid": "9ce542f8-7792-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.197.160.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861805, "uuid": "88505c7a-7789-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.16.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871465, "uuid": "06808040-77a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.254.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792444, "uuid": "0a554051-76e8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.155.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825983, "uuid": "20f9139f-7736-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.179.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861924, "uuid": "cf1129ab-7789-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.216.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813808, "uuid": "c8481657-7719-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.95.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857724, "uuid": "07c3a53f-7780-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.108.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726858807, "uuid": "8d542f1a-7782-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.108.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799524, "uuid": "8659e3ac-76f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.111.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834683, "uuid": "627b7b17-774a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.80.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726814764, "uuid": "01d4ca1d-771c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.126.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864864, "uuid": "a7cc5644-7790-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.229.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868523, "uuid": "2cec00bf-7799-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.69.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813808, "uuid": "c844e33c-7719-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.107.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726831024, "uuid": "dd5ab2db-7741-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.171.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813564, "uuid": "365b8631-7719-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.57.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841524, "uuid": "501307da-775a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.130.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726814283, "uuid": "e340b0bb-771a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.143.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870983, "uuid": "e6e56fc2-779e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.181.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842364, "uuid": "44f7834d-775c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.181.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726876205, "uuid": "0f6b72f8-77ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.189.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726814705, "uuid": "dee31d35-771b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.191.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808705, "uuid": "e64b31ac-770d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.20.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc577e3-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.23.5", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871104, "uuid": "2ed24db2-779f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.27.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871043, "uuid": "0ad25ab7-779f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.65.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823584, "uuid": "8ac75ec8-7730-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.65.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800305, "uuid": "5796caf0-76fa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.65.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806305, "uuid": "501ffa32-7708-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.72.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829523, "uuid": "5ee00c44-773e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.74.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803905, "uuid": "b92ef1d0-7702-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.88.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726847943, "uuid": "423cd6ee-7769-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.95.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800724, "uuid": "512ba149-76fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.158.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871704, "uuid": "94d5fde5-77a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.249.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872606, "uuid": "ae1ad3a2-77a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.251.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849084, "uuid": "ea298df7-776b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.19.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811523, "uuid": "761a0164-7714-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.210.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848423, "uuid": "606fcc1d-776a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.222.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822923, "uuid": "013dfd02-772f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.242.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818364, "uuid": "63af0607-7724-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.246.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851123, "uuid": "a9ad6d21-7770-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.250.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826705, "uuid": "cf4f5c5a-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.179.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824906, "uuid": "9eb25641-7733-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.228.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856284, "uuid": "ad99c2da-777c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.171.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "9504ef9c-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.181.205", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809123, "uuid": "dfb29389-770e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.113.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794483, "uuid": "c93d8264-76ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.114.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726795683, "uuid": "94d9c5d7-76ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.117.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816683, "uuid": "79bf2b3b-7720-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.127.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726873143, "uuid": "ee6788dc-77a3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.150.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797904, "uuid": "c087a4ea-76f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.152.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792444, "uuid": "0a555668-76e8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.252.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794064, "uuid": "cfae5833-76eb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.82.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819264, "uuid": "7c4fc33d-7726-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.93.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813866, "uuid": "ea846e20-7719-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.94.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833184, "uuid": "e4c613de-7746-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.14.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871163, "uuid": "5276bc2f-779f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.8.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "9508eb91-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.200.165", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "9506208b-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.211.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874583, "uuid": "48b19cd4-77a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.217.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726805104, "uuid": "840dafa5-7705-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.149.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826943, "uuid": "5d323b8e-7738-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.150.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812183, "uuid": "ff9a219a-7715-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.151.53", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818543, "uuid": "ce6abb85-7724-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.254.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790764, "uuid": "209b6add-76e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.64.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726873264, "uuid": "36b41316-77a4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.194.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798563, "uuid": "498aaaba-76f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.196.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816024, "uuid": "f0a3fa92-771e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.42.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "95055b0a-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.61.122", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870444, "uuid": "a5634856-779d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.62.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806244, "uuid": "2b4aa08c-7708-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.93.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807564, "uuid": "3e088037-770b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.140.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815305, "uuid": "43fec449-771d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.141.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821244, "uuid": "181f089f-772b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.143.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835465, "uuid": "344f9367-774c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.37.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864744, "uuid": "5fff6f1f-7790-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.43.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726828084, "uuid": "05032ad9-773b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.44.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853043, "uuid": "21f58d6c-7775-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.45.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726849206, "uuid": "32988c8e-776c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.47.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804923, "uuid": "180a39d0-7705-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.90.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810923, "uuid": "1054651e-7713-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.95.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806184, "uuid": "078fc26f-7708-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.244.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820284, "uuid": "dbc114eb-7728-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.60.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846444, "uuid": "c4d8c8b5-7765-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.113.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815363, "uuid": "671c7ba0-771d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.49.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794964, "uuid": "e7e604d8-76ed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.49.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807505, "uuid": "1adc75d3-770b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.119.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851183, "uuid": "cd683fb7-7770-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.249.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801684, "uuid": "8d701707-76fd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.4.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792563, "uuid": "51370142-76e8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.5.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820824, "uuid": "1d907e0f-772a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.9.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833304, "uuid": "2cce15c7-7747-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.107.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806423, "uuid": "960383ec-7708-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.119.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810623, "uuid": "5dd8e6bc-7712-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.121.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806845, "uuid": "91d50f8c-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.127.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726847764, "uuid": "d75dcfd5-7768-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.144.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816805, "uuid": "c2738c68-7720-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.240.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816984, "uuid": "2ce8b2bc-7721-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.62.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794064, "uuid": "cfae6cd2-76eb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.102.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797543, "uuid": "e955a417-76f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.109.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726793705, "uuid": "f992e0a8-76ea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.233.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808884, "uuid": "50fc9d50-770e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.234.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874523, "uuid": "251f4a62-77a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.238.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833363, "uuid": "4fa8927d-7747-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.250.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841524, "uuid": "50133a5e-775a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.170.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874583, "uuid": "48b19ef0-77a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.208.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802044, "uuid": "6408cd8a-76fe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.214.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802884, "uuid": "587f9c98-7700-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.32.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819505, "uuid": "0b638090-7727-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.34.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791964, "uuid": "ebcedbd7-76e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.35.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845424, "uuid": "64a5b248-7763-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.37.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726843564, "uuid": "0fe61acd-775f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.38.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821605, "uuid": "ef47352a-772b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.38.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833304, "uuid": "2cce2494-7747-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.38.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835764, "uuid": "e692e5b3-774c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.38.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806724, "uuid": "49b7fea6-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.38.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808524, "uuid": "7a4dc756-770d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.41.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810805, "uuid": "c9f66cda-7712-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.42.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812843, "uuid": "890ce3f8-7717-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.44.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806244, "uuid": "2b4a9b77-7708-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.44.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815124, "uuid": "d8415e85-771c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.90.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829164, "uuid": "88b1de26-773d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.25.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791006, "uuid": "b0d8f1d7-76e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.25.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866184, "uuid": "ba6d718c-7793-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.160.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798143, "uuid": "4f039bb8-76f5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.161.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822205, "uuid": "55204a28-772d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.166.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726814823, "uuid": "250a0dd4-771c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.167.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809724, "uuid": "45930565-7710-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.168.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726811704, "uuid": "e200a6bf-7714-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.169.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc5cb61-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.169.53", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835883, "uuid": "2da3a864-774d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825264, "uuid": "7403c731-7734-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.21.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "9508e307-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.21.95", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791244, "uuid": "3ec55367-76e5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.23.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866005, "uuid": "4faca988-7793-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.23.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc5c2b5-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.34.193", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821724, "uuid": "361add3d-772c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.36.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "95062d14-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.46.7", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790584, "uuid": "b532e7c3-76e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.18.126", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802884, "uuid": "587f9719-7700-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.171.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813084, "uuid": "1888ad53-7718-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.173.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799524, "uuid": "865a24d1-76f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.193.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869123, "uuid": "9296e7b5-779a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.197.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819923, "uuid": "051c2032-7728-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.203.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829823, "uuid": "11a8f925-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.204.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804023, "uuid": "ffc43fdd-7702-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.205.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835823, "uuid": "0a3b3126-774d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.0.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823344, "uuid": "fba6baf3-772f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.101.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726858505, "uuid": "d95f7b26-7781-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.106.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871585, "uuid": "4dbfac74-77a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.172.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822805, "uuid": "baea2e94-772e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.4.209", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799706, "uuid": "f244f20f-76f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.101.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863663, "uuid": "dc2c4c16-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.139.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "950460f2-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.170.185", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833783, "uuid": "4a2fcddb-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.110.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823643, "uuid": "ae1923ea-7730-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.186.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833844, "uuid": "6e49abf1-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.209.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871465, "uuid": "06806a42-77a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.209.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812244, "uuid": "2382b67f-7716-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.211.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726838284, "uuid": "c4919106-7752-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.25.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869363, "uuid": "21702874-779b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.88.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826465, "uuid": "3ff02047-7737-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.99.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726795323, "uuid": "be06066d-76ee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.189.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856883, "uuid": "128c7d55-777e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.63.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815904, "uuid": "a98a1d6e-771e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.65.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794304, "uuid": "5e816129-76ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.74.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812723, "uuid": "41600bb5-7717-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.171.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812183, "uuid": "ff9a4d0b-7715-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.220.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863842, "uuid": "46afa97f-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.27.121.146", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mixbot", "colour": "#555f6d", "exportable": true, "hide_tag": false }, { "name": "nbot", "colour": "#040054", "exportable": true, "hide_tag": false }, { "name": "ofc", "colour": "#cb39de", "exportable": true, "hide_tag": false }, { "name": "offon", "colour": "#c212a4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857244, "uuid": "e9edef64-777e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.4.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc55573-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.253.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726805043, "uuid": "5fe157c2-7705-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.118.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796463, "uuid": "65ac3652-76f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.168.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810325, "uuid": "abe817c1-7711-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.175.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865943, "uuid": "2b25360a-7793-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.199.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "9504432e-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.27.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806184, "uuid": "078fca9f-7708-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.6.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797904, "uuid": "c087c585-76f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.67.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821184, "uuid": "f4751fa5-772a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.73.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861023, "uuid": "b68aae4e-7787-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.80.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796583, "uuid": "ad526ef1-76f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.86.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804264, "uuid": "8f0a0945-7703-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.92.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726793405, "uuid": "46e0f297-76ea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.236.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846144, "uuid": "119d62ba-7765-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.133.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853343, "uuid": "d4f032c6-7775-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.114.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726876205, "uuid": "0f6b6f65-77ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.189.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807864, "uuid": "f0e99677-770b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.64.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794363, "uuid": "820d91a4-76ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.118.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794244, "uuid": "3ae1c779-76ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.65.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "9504bb31-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.69.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871645, "uuid": "717bc0bc-77a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.19.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798863, "uuid": "fc528d9b-76f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.137.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839364, "uuid": "48856279-7755-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.191.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726868706, "uuid": "99d1c91f-7799-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.79.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812183, "uuid": "ff9a0185-7715-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.184.17", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810984, "uuid": "347e14d2-7713-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.6.105.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824784, "uuid": "565513c5-7733-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.210.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863724, "uuid": "000f4b75-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.24.85.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852505, "uuid": "e15efd49-7773-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.131.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826284, "uuid": "d41c631b-7736-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.6.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830184, "uuid": "e89eeecf-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.80.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850343, "uuid": "d8b2a15d-776e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.18.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856644, "uuid": "84007bf9-777d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.60.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830605, "uuid": "e3e56fb4-7740-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.236.160.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824964, "uuid": "c154f100-7733-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "141.98.7.44", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806845, "uuid": "91d4a7e1-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "146.103.47.74", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846084, "uuid": "edb49506-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.18.113", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852863, "uuid": "b6af01ba-7774-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.19.56", "Tag": [ { "name": "bruteforce", "colour": "#de303d", "exportable": true, "hide_tag": false }, { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CVE-2016-5195", "colour": "#D8D4DD", "exportable": true, "hide_tag": false }, { "name": "DirtyCow", "colour": "#E3CBBF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "NanoMiner", "colour": "#c5325e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833783, "uuid": "4a2d95c5-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.19.57", "Tag": [ { "name": "CVE-2017-17215", "colour": "#ec4b5b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825264, "uuid": "74035915-7734-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.19.58", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825384, "uuid": "bbe2032f-7734-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.19.59", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841044, "uuid": "31a17a2d-7759-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.19.60", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825324, "uuid": "97ccd31c-7734-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.19.61", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817584, "uuid": "92b64150-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.20.238", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860184, "uuid": "c210c775-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.25.72.207", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862043, "uuid": "16431eb3-778a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.94.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854724, "uuid": "0b89cc80-7779-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "167.172.70.35", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "netcat", "colour": "#c53a03", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726873206, "uuid": "13cb95b2-77a4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.10.18.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812183, "uuid": "ff99a7a9-7715-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.36.183", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822444, "uuid": "e35b1c17-772d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.133.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820944, "uuid": "653b46a7-772a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.97.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841944, "uuid": "4a2e8913-775b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819624, "uuid": "52bf72b7-7727-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.62.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816206, "uuid": "5d3cbdc0-771f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.89.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812605, "uuid": "fb21d139-7716-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.99.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803365, "uuid": "77492ea2-7701-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.15.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809724, "uuid": "4593035e-7710-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.73.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806905, "uuid": "b5a59764-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.215.238.7", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806845, "uuid": "91d4e152-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "18.223.158.120", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "reverseshell", "colour": "#e2ec5e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852984, "uuid": "fe6e549b-7774-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.112.73.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796283, "uuid": "fa359132-76f0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.47.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726805344, "uuid": "12ef4493-7706-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.75.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726793164, "uuid": "b7028ca1-76e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.68.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862943, "uuid": "2eb6f2a1-778c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.0.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726795504, "uuid": "29ff46ea-76ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.4.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810923, "uuid": "105442d6-7713-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.151.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871943, "uuid": "2346ddaf-77a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.62.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797243, "uuid": "3646ba75-76f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.9.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832105, "uuid": "61b21865-7744-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.15.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801623, "uuid": "696256fb-76fd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.169.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823464, "uuid": "434ef78a-7730-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.21.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803544, "uuid": "e1efedb9-7701-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.244.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866244, "uuid": "de03e3bf-7793-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.246.73", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808583, "uuid": "9dcee92d-770d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.109.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808583, "uuid": "9dcf390b-770d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.113.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825143, "uuid": "2c3c632e-7734-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.154.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810923, "uuid": "10545342-7713-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.3.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824304, "uuid": "38528e13-7732-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.9.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796164, "uuid": "b33d4cb6-76f0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.9.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871525, "uuid": "2a056d54-77a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.215.113.37", "Tag": [ { "name": "cmd", "colour": "#965958", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726805406, "uuid": "37f46e28-7706-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.97.113.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870263, "uuid": "39828e8f-779d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.119.113.152", "Tag": [ { "name": "bazaloader", "colour": "#472954", "exportable": true, "hide_tag": false }, { "name": "bruteratel", "colour": "#898f3d", "exportable": true, "hide_tag": false }, { "name": "Latrodectus", "colour": "#ba6b84", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "95089b84-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.109.225.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790584, "uuid": "b532a232-76e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.111.100.234", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817584, "uuid": "92b6be3e-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.188.21.252", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726838763, "uuid": "e288c717-7753-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "197.89.57.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818483, "uuid": "aa720352-7724-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.59.184.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806064, "uuid": "c0145686-7707-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.59.86.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794724, "uuid": "58dd027c-76ed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.141.42.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790584, "uuid": "b532de7d-76e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.50.99.52", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799284, "uuid": "f6f303d1-76f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.16.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846265, "uuid": "59d90e70-7765-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.168.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807383, "uuid": "d28f24d0-770a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.63.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856284, "uuid": "ad99d12e-777c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.88.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821244, "uuid": "181f1468-772b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.79.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798684, "uuid": "91278d5c-76f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.24.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820164, "uuid": "946c66cc-7728-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.255.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726814106, "uuid": "79c87f1c-771a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.63.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc50e79-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.158.159.243", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840563, "uuid": "137e549c-7758-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.10.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726873923, "uuid": "bf7f9468-77a5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.22.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809483, "uuid": "b647f249-770f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.87.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812423, "uuid": "8ec3862f-7716-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.126.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862464, "uuid": "116a1268-778b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.191.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864383, "uuid": "894b4fc3-778f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.197.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826105, "uuid": "699d2461-7736-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.199.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829223, "uuid": "ac38ee9e-773d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.227.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812543, "uuid": "d627357e-7716-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.71.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797904, "uuid": "c0874cf6-76f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.74.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865343, "uuid": "c568e99b-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.84.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824906, "uuid": "9eb1b725-7733-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.196.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822984, "uuid": "252df603-772f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.111.75.217", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797004, "uuid": "a80b42fc-76f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.100.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798504, "uuid": "264a0db6-76f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.100.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815063, "uuid": "b43d9f85-771c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.102.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820164, "uuid": "946c69fc-7728-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.102.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800663, "uuid": "2d3a4241-76fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865105, "uuid": "3759eaac-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726857964, "uuid": "97445856-7780-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840024, "uuid": "d1f7e171-7756-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.109.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726832824, "uuid": "0e4762cb-7746-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804205, "uuid": "6bfe72db-7703-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859943, "uuid": "32c7567b-7785-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830906, "uuid": "97347f28-7741-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852505, "uuid": "e15f00ca-7773-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875964, "uuid": "7f96b087-77aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870624, "uuid": "10dd73f3-779e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.178.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823765, "uuid": "f6c24c8b-7730-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.178.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850704, "uuid": "afc39f21-776f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.179.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872543, "uuid": "890d8a88-77a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.180.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816805, "uuid": "c2736d25-7720-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.180.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822083, "uuid": "0c589fff-772d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.182.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726843564, "uuid": "0fe63a9f-775f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.183.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791485, "uuid": "ce990e06-76e5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.183.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841884, "uuid": "269d4ebb-775b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.183.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841343, "uuid": "e43640a3-7759-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.225.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804505, "uuid": "1eb7a483-7704-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.186.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726820883, "uuid": "4146c84f-772a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.85.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726831924, "uuid": "f604ea0d-7743-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.87.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726876505, "uuid": "c26f9c5e-77ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.124.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726875483, "uuid": "610f696d-77a9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.211.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799044, "uuid": "67ed1597-76f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.80.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802644, "uuid": "c9884b90-76ff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.104.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808044, "uuid": "5c4924a2-770c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.4.94.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808224, "uuid": "c781aa44-770c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.140.202.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817584, "uuid": "92c00e4e-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.50.176.85", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797904, "uuid": "c087a05a-76f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.54.147.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806607, "uuid": "04223cbb-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.71.113.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833844, "uuid": "6e49c7ff-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.206.189", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815844, "uuid": "85438300-771e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.86.145.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860608, "uuid": "bf1c5347-7786-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.109.57.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825623, "uuid": "4a813558-7735-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.231.37.153", "Tag": [ { "name": "criptonize", "colour": "#9F4BDE", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726859343, "uuid": "cd2099ef-7783-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.4.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840383, "uuid": "a827b447-7757-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.76.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726841223, "uuid": "9cdcee7c-7759-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.195.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869483, "uuid": "690ccfd5-779b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.53.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726824005, "uuid": "85fd974c-7731-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.177.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726835883, "uuid": "2da3a2d9-774d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.203.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726828684, "uuid": "6aab9ff2-773c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.237.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861743, "uuid": "636bd6eb-7789-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.236.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865105, "uuid": "3759bc4e-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.43.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869305, "uuid": "fe81301c-779a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.213.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842305, "uuid": "219d81d4-775c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.72.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726843984, "uuid": "0a13b81f-7760-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.88.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867865, "uuid": "a434cb6d-7797-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.161.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812244, "uuid": "2382ca15-7716-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.103.238", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726828684, "uuid": "6aab8083-773c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.70.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819684, "uuid": "7637567e-7727-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.84.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862823, "uuid": "e73e1634-778b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.3.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854243, "uuid": "ed3a35d2-7777-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.116.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866905, "uuid": "6870c4ff-7795-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.172.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726838284, "uuid": "c491a13f-7752-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.192.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872306, "uuid": "fb8a2223-77a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.32.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726827964, "uuid": "bd88f992-773a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.120.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815664, "uuid": "1a354ce2-771e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.152.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807023, "uuid": "fbcc2153-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.10.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809844, "uuid": "8d0d6cc4-7710-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.188.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803365, "uuid": "77494160-7701-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.194.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791244, "uuid": "3ec54847-76e5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.196.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800964, "uuid": "e06ab520-76fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.52.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799944, "uuid": "805674af-76f9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.194.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837984, "uuid": "11e94500-7752-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.110.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846084, "uuid": "edb415d5-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.14.226.28", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726845724, "uuid": "171f84b4-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.61.185.79", "Tag": [ { "name": "dvr", "colour": "#2fdef6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "proxy", "colour": "#797c8a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726866184, "uuid": "ba6d623c-7793-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.64.226.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726865044, "uuid": "12d738d1-7791-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.89.247.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hidakibest", "colour": "#AA8BF4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864083, "uuid": "d6377223-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "52.169.233.237", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802583, "uuid": "a5a15279-76ff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.186.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817823, "uuid": "21539367-7723-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.188.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851183, "uuid": "cd685004-7770-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.26.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790584, "uuid": "b5329567-76e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.42.72", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834863, "uuid": "cddf9bdc-774a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.64.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726839964, "uuid": "ae474774-7756-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.68.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794423, "uuid": "a5ab27ec-76ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.177.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833304, "uuid": "2cce1194-7747-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.179.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792508, "uuid": "30269949-76e8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.136.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804205, "uuid": "6bfe6667-7703-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.137.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726809784, "uuid": "699a9a6a-7710-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.146.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810208, "uuid": "664dad04-7711-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.240.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726848843, "uuid": "5a8b0bd7-776b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.252.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833363, "uuid": "4fa8a33e-7747-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.68.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726814224, "uuid": "bfb5f65b-771a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.77.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792325, "uuid": "c2f39fee-76e7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.78.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812123, "uuid": "dbcfa15a-7715-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.97.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815423, "uuid": "8a9d1c8b-771d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.103.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854544, "uuid": "a03fa5e3-7778-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.108.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc5152a-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.11.139", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794543, "uuid": "ed6b0c73-76ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.114.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792923, "uuid": "27ce5197-76e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.116.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726871704, "uuid": "94d6664f-77a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.122.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792984, "uuid": "4be53fbf-76e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.124.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726843084, "uuid": "f1a7f8a6-775d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.132.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808343, "uuid": "0eb0623a-770d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.132.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726843683, "uuid": "572cac50-775f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.133.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813323, "uuid": "a70bb00d-7718-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.136.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813383, "uuid": "cae36c5c-7718-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.139.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc5d062-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.43.165", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852743, "uuid": "6f129671-7774-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.98.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790584, "uuid": "b5324e47-76e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.252.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821605, "uuid": "ef4707a3-772b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.253.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797363, "uuid": "7e4bae0d-76f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.52.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726796643, "uuid": "d0bb00a2-76f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.63.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801744, "uuid": "b137398a-76fd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.75.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818963, "uuid": "c8cee84f-7725-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.0.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726837323, "uuid": "881a25d5-7750-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.12.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818423, "uuid": "86c24dbf-7724-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.123.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821007, "uuid": "8ae4da78-772a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.149.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813866, "uuid": "ea847b95-7719-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.151.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "950510a0-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.153.71", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791304, "uuid": "62a8960a-76e5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.2.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806064, "uuid": "c0142be7-7707-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.225.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861023, "uuid": "b68aba47-7787-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.225.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726856163, "uuid": "65c1b8f5-777c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.233.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874406, "uuid": "df01cff4-77a6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.234.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726791423, "uuid": "a9bac466-76e5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.5.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846324, "uuid": "7d503e64-7765-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.11.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790824, "uuid": "44557428-76e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.194.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726801923, "uuid": "1c3f455a-76fe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.195.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726821844, "uuid": "7d9b2df9-772c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.196.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726815423, "uuid": "8a9d1224-771d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.199.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804684, "uuid": "8976a45e-7704-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.205.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726850405, "uuid": "fd5a4e88-776e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.70.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798263, "uuid": "96802ebe-76f5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.95.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802223, "uuid": "ced94c62-76fe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.160.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726805884, "uuid": "54a86494-7707-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.21.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872243, "uuid": "d6131c29-77a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.81.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808464, "uuid": "5697fe3f-770d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.81.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726827184, "uuid": "ec8fa376-7738-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.88.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726864144, "uuid": "fa4bdb97-778e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.89.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726869843, "uuid": "3fbd9425-779c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.91.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808224, "uuid": "c781a713-770c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.93.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726802284, "uuid": "f31d671c-76fe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.99.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833783, "uuid": "4a307d8e-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.170.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726860665, "uuid": "e0e64696-7786-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.175.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726808105, "uuid": "80feea7e-770c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.191.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810563, "uuid": "3a1517cb-7712-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.86.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726851664, "uuid": "ebf44062-7771-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.180.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726795504, "uuid": "29ff313f-76ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.188.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726826284, "uuid": "d41c775d-7736-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.231.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807083, "uuid": "1fd53329-770a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.234.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792624, "uuid": "7532cc0c-76e8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.154.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812605, "uuid": "fb228818-7716-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.44.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812605, "uuid": "fb21c56f-7716-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.46.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800905, "uuid": "bd2582af-76fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.97.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726799524, "uuid": "8659e7d4-76f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.11.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822263, "uuid": "77db7d21-772d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.80.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726825924, "uuid": "fd77cee1-7735-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.80.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819384, "uuid": "c377eeed-7726-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.92.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822683, "uuid": "71c95417-772e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.255.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797123, "uuid": "ef37eaaa-76f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.112.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794006, "uuid": "ad00f9f0-76eb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.114.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874406, "uuid": "df01f348-77a6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.115.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726827783, "uuid": "51c99a8c-773a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.117.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726819023, "uuid": "ec93c951-7725-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.123.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797963, "uuid": "e3e27756-76f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.43.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840744, "uuid": "7ecf47d7-7758-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.121.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870444, "uuid": "a563431f-779d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.61.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807023, "uuid": "fbcc4612-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.100.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834984, "uuid": "15a5ee58-774b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.130.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822623, "uuid": "4e102cf6-772e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.217.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726804743, "uuid": "acd85d69-7704-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.218.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726790883, "uuid": "679de9eb-76e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.218.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726794183, "uuid": "16832cca-76ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.57.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726833664, "uuid": "032dd83d-7748-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.155.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810384, "uuid": "cedf5708-7711-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.239.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803065, "uuid": "c4b6bddb-7700-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.177.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726842544, "uuid": "afdc923e-775c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.183.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800064, "uuid": "c7bf51ea-76f9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.224.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726840624, "uuid": "3768c472-7758-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.224.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726793104, "uuid": "93b1a128-76e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.230.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726844584, "uuid": "6fc5af25-7761-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.232.35", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807383, "uuid": "d28f3fb3-770a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.243.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726847464, "uuid": "24a51169-7768-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.152.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726874705, "uuid": "912ce729-77a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.196.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726855384, "uuid": "950c52a3-777a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.109.33", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726807023, "uuid": "fbcc3300-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.135.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726852323, "uuid": "74cf9aa4-7773-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.138.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829883, "uuid": "3565db8a-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.139.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823464, "uuid": "434ee8cc-7730-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.139.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800483, "uuid": "c1eea70f-76fa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.142.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792508, "uuid": "3026048d-76e8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.143.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846505, "uuid": "e8afabef-7765-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.143.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726816263, "uuid": "7f69ee00-771f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.17.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726810083, "uuid": "1be4e4d4-7711-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.191.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726829705, "uuid": "cb3907e2-773e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.23.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792923, "uuid": "27ce4b47-76e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.31.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800844, "uuid": "98c00b2e-76fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.92.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798143, "uuid": "4f03a7e5-76f5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.98.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726872306, "uuid": "fb8a1427-77a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.133.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854605, "uuid": "c4dba3f5-7778-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.220.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726798443, "uuid": "01dd8bcd-76f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.230.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726800784, "uuid": "74df190a-76fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.76.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726812183, "uuid": "ff99e790-7715-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.149.67", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726813084, "uuid": "18889efc-7718-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.202.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726822984, "uuid": "252dfcf1-772f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.87.179", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726803844, "uuid": "94ec5b86-7702-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.95.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726838043, "uuid": "3559ef33-7752-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.197.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867563, "uuid": "f0ae18e7-7796-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.232.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726797423, "uuid": "a1d19fdc-76f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.168.119.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726792265, "uuid": "9f66bf8f-76e7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.243.227.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846084, "uuid": "edb42f99-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.65.232", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726853763, "uuid": "cf2ecf7d-7776-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.71.92", "Tag": [ { "name": "AikoStress", "colour": "#BDBED5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "killua", "colour": "#9460FB", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726834144, "uuid": "21205760-7749-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.51.192.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846024, "uuid": "ca1bc38c-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.134.32.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1726817584, "uuid": "92b6cb96-7722-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.214.52.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806905, "uuid": "b5b12240-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "access-htaccess.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726861983, "uuid": "f2adc26f-7789-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "af.peertube.red" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726830006, "uuid": "7ea64039-773f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "echo-c2.kro.kr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818124, "uuid": "d4703125-7723-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "enerjikcocukoyunlari.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818005, "uuid": "8d899ac2-7723-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "evinizicinsanat.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726823943, "uuid": "613191b5-7731-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "github-scanner.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806905, "uuid": "b5ae8a2c-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "github-scanner.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726854904, "uuid": "773b3425-7779-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "hacker.eliron-networks369.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726862283, "uuid": "a56ecfba-778a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "myugu.therapy.emergencepsychservices.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726867024, "uuid": "aee76d59-7795-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "nerv.com.pe" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726846024, "uuid": "ca272cb0-7764-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "pelentions.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870626, "uuid": "11f07d2f-779e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "plantytime.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806905, "uuid": "b5b32f6f-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "retireborn.art" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726806906, "uuid": "b5d2f045-7709-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-head.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726870626, "uuid": "11f08db6-779e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.plantytime.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863666, "uuid": "dd820625-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.yflogistics.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726818124, "uuid": "d4cd1346-7723-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "yeniakillitelefonlar.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1726863666, "uuid": "ddda945d-778d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "yflogistics.net" } ] } }