{ "Event": { "published": true, "date": "2026-01-29", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-01-29", "timestamp": 1769732125, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "a5091c30-1936-4a59-afdb-1453a1e471c8", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1769645001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645001, "uuid": "9e3d8954-987a-49f3-8440-c5a0c0dd1cc1", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645001, "uuid": "3795b90f-ef7f-4bf6-af9d-a5668bace04b", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769645001, "uuid": "73b71a5c-2d58-4c5b-bd40-1b9fd09328e2", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769645001, "uuid": "60ccbe56-b048-4f64-b5d7-da29b6285a82", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769645001, "uuid": "6499fedf-a4f1-4fd3-a11c-ff698d250eb3", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "771ff372-fba4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769645629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645629, "uuid": "f014f4de-a0a2-4bac-8827-f9b79581226d", "comment": "Malware payload", "value": "08ba0326f5f2ac3674e28102bdfdcbbc", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645629, "uuid": "bc8f0510-31fc-4e2f-9420-2710bf25c23f", "comment": "Malware payload", "value": "4a12223d5818457bbe03dc3c45bf0a212e999b8a0972f4f8aeb10d5b23f17989", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769645629, "uuid": "7ddad6a4-73f4-4039-8f04-97aa6e44cbc9", "value": "T1E4310A0ECBD6A80CEF447F37179571B0D288CD92B1C2236D973DE2884EC75642AA90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769645629, "uuid": "38944b96-f92a-4082-b30c-3551864de31f", "value": "24:9JuHm558qcLr/M/+GQFlw3I+69X8VXG1gGyxObhOpRLhX4TMuHxmoPat:9amgLrk/+GD3bek2K0jyRt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769645629, "uuid": "42be44d5-b66c-46d6-9142-b49a920f3e8a", "value": 1588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769645629, "uuid": "c9247b02-be41-4a4f-9155-a993ee8a7707", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbad002f-fca7-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769645805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645805, "uuid": "b91b13db-02e1-4856-8533-b6408789d836", "comment": "Malware payload", "value": "ee652aa2a89adc20e9a3d117eb6f521a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645805, "uuid": "8f97b772-0e9e-4efa-9d3c-c24742ba1aba", "comment": "Malware payload", "value": "a0428fa37620f7cd08ba1deabbc16ca5e713b791baba36d6dfb3e3195dace499", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769645805, "uuid": "57406092-9c6e-4c13-acd6-9c75c039538f", "value": "T10893E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769645805, "uuid": "d3e669c9-cd64-42b1-a599-a8bf6a010838", "value": "1536:pap92uEEwH8Qw0DMqpYJKNoE+pTYeGf8BqLv3TliCoRGpNuqYPPXvIH8LutVWw:I6uEEwH8h0v+pHBqv3TliCoRGpNuqYP+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769645805, "uuid": "b1c5f2e9-574f-4ee3-b6bc-8a739c1eaab7", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769645805, "uuid": "09bc6f93-b233-40b9-b9ba-042b8ccafdf0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769646016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646016, "uuid": "9dd4e9b5-96fe-426d-8321-22dd57213786", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646016, "uuid": "506153d6-7acd-4ca7-8601-b66fcbc908a9", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646016, "uuid": "919e388f-d49f-4baf-a3ce-92850ddf8dda", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646016, "uuid": "ae268313-651f-4aa7-a9a6-e3e9c3634954", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769646016, "uuid": "8e3f148b-2b99-42a3-a83b-20e19c100808", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b273af2f-fc93-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769646042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646042, "uuid": "7b1464bf-1978-4367-860e-e703c25ea732", "comment": "Malware payload", "value": "ecb58cd9fb33fa59997fb77c7005d7b6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646042, "uuid": "4c6efd1e-e410-442e-8125-3143f51f5536", "comment": "Malware payload", "value": "a75ee73734196ba6059275c0c1b33e97dd1569e0eef8240f5c488d33ad9ce961", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646042, "uuid": "1425d474-e2d8-474d-8208-2b8c96937e87", "value": "T159312C11CE36F170C604E939B9D07E57D235C0DE4595EDA20816AA6290035C55D2CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646042, "uuid": "35e5250b-2135-4288-a060-d52ed332426c", "value": "24:9RIHy2taYEkfDKAu00m5gOQQ2kxgcSRxqgdZwbrsoEyeS:962k+AvGZkg7LqMZBxe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769646042, "uuid": "c9d7c576-1940-4193-927a-3e86816efa54", "value": 1585, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646042, "uuid": "827a9bd0-ad54-42f8-8827-05ff7aae51cd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd4d50f3-fca8-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769646264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646264, "uuid": "0ba7f299-afab-44a5-8c32-3af63716032e", "comment": "Malware payload (Mirai)", "value": "2e54c204f98f9c3e51c526cad3e81b07", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646264, "uuid": "4e3f9a7c-7509-4dfb-881a-72c8797025d8", "comment": "Malware payload (Mirai)", "value": "dfa8f8aafe94fd74590fc79a2ebd01e129103b93cdd59d93277f8e61c8321fb0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646264, "uuid": "8e4430fc-12d8-4d4d-8f78-c8b1279b0261", "value": "T1733181C618812B3E8DC885313792A02D606D2DC52F261EE89CDF6CD6B681BD2B358D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646264, "uuid": "7d993ed9-ce2c-4738-a632-b883350a0a6e", "value": "24:5QEBvNq1dgeBFBvpchO74TtqBvTmBTb91Bv2y1Bei7EByTvT8bgOrQtqBVSjbbvW:OovNq3B7vShTcv+1Lv20y07u46I9jFfK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769646264, "uuid": "3c10b298-24ab-4f05-9532-913a483d26b0", "value": 1509, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646264, "uuid": "0fe5a19f-1071-432d-896e-2e498e472c47", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769646832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646832, "uuid": "b5a64ede-576d-4154-9ef6-0eae741002ee", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646832, "uuid": "390a57a8-a659-4f0e-88c6-13ae2aacba29", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646832, "uuid": "fabf4c29-e0e8-47d3-a0c9-05fa1f67052c", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646832, "uuid": "e7843629-2f33-4f8a-aa12-53a3eb1c533d", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769646832, "uuid": "abcb837b-7b6f-4844-b076-dcba9235b205", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f56a49c-fcab-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769647422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647422, "uuid": "87b3ece9-2f56-4de3-8354-c5d65d55f020", "comment": "Malware payload", "value": "0509fdf182ca28c2f57f95e9a1ec7644", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647422, "uuid": "789be260-75d2-4407-b994-1604f5753b96", "comment": "Malware payload", "value": "11074bff71b739721ace0340137a2d59f21bd4f640672297ca7f5447467cff41", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647422, "uuid": "8e6b97a1-9b6a-4755-a9f1-f7c6ab3fe5d5", "value": "T1E28309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647422, "uuid": "2d8b883b-2fe5-42a3-9213-68cc2b335c7c", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn6WaPVN/:XEKltp9txAX/yr2pb6WiVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769647422, "uuid": "eb541664-86f0-4c69-8306-7f7b1b046eda", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647422, "uuid": "7b5ed3a4-85ce-4a6c-a113-032a66f1524f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c36aecb6-fcab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769647509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647509, "uuid": "3fb77342-2216-4619-bc5f-a6c38a61a41e", "comment": "Malware payload (Mirai)", "value": "91c278985d9fe60f40daf02be36ccb0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647509, "uuid": "26e0f726-64a2-45c8-b5c5-3193345f40db", "comment": "Malware payload (Mirai)", "value": "1fe715bc65a68d5f42050290e697558e7be12fd6cae8be05dbca6f71f350c6e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647509, "uuid": "d1755fe1-3f22-49a7-a649-b83821a61109", "value": "T1ED3301BA340A14C9D9A3887A563947DD5F7B3D852803BF4D5B6AEBC74A410E47CA3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647509, "uuid": "abb94f71-cb91-47ce-9857-f11331538cb9", "value": "768:c3lbDOBDLGyhns3lgVTmZjUiRIFuL2lCynLJO0aDA3QSs4dmfBKjP3wfYWHMXPoj:c3kQEsVgpmZjUKLE/KINmQcYXAN6VJuT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769647509, "uuid": "a9a2eeca-68bf-42e0-96d6-63d361ea4c37", "value": 53592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647509, "uuid": "44028725-81fc-4dda-87e7-764af4962e53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58b1715c-fcac-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769647760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647760, "uuid": "2176fce7-df95-4f5c-8800-6f5140ed2b9a", "comment": "Malware payload (Mirai)", "value": "8b030d556a4175dd6af72f37c7c47c69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647760, "uuid": "7023aec5-6004-4546-a748-48cd169d0f89", "comment": "Malware payload (Mirai)", "value": "dd898f1cc12fc80dcdd5a91e10023a4b67be38cb1824016a65f534ced8e1ae45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647760, "uuid": "1659a104-9c29-40f5-8368-1bb21a6dbeb3", "value": "T137B37B33D8612E68C669D074B1B48F792B539594824B0FBE19B7C3B49443CCDF90AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647760, "uuid": "90c8119b-ae8f-4aff-95c5-f8d732566a41", "value": "1536:OaHxnzppSVICjPyWtaXC7fbEj1njZWfQnQkKeY9IrM+Zau:OaxKVISPyWt0kbEj1jZWInQLeLau", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769647760, "uuid": "68b16d14-317f-4f8f-9b96-07da8a17db10", "value": 117444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647760, "uuid": "7c925d3b-143d-40b6-b6fc-138aa352b6c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aed112ee-fbb3-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769648013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769648013, "uuid": "cfcfffa2-44c3-41af-9a50-7f14d7d02b88", "comment": "Malware payload", "value": "b9e407ce31812c8ba5492d9326da7347", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769648013, "uuid": "b63b010e-77cc-445b-9e3c-2a132dc1e105", "comment": "Malware payload", "value": "3bc3d4e8ce9aa076f1472ac8ff09fb1ac304d891ee776d1ebd7c499284819794", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769648013, "uuid": "04cf9c0b-11eb-4057-b68c-872710e5649e", "value": "T1C7310A02638C1648D0C3C9B5728E5592E0A608474A8CE1A78D655FA0EF6B13C0AB63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769648013, "uuid": "c3502277-0268-4e00-834b-b2c074d47608", "value": "48:9thjBAuu9+xnz8aNG2hax0G5ROSbJIAX/:XbJoGV4xD5rDX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769648013, "uuid": "47e6c38c-aad7-41b1-99c8-a92544fd6c98", "value": 1581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769648013, "uuid": "7a67b82f-ef7a-4789-97e0-675f87620cbc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769649373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649373, "uuid": "da6e50d2-301f-4934-9591-24474335d99a", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649373, "uuid": "06566bf3-cf06-4cd5-8aff-ae2218d4903c", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769649373, "uuid": "76a329d4-60ef-432d-b00d-08332cb420f5", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769649373, "uuid": "e47fda79-3086-4b07-bfd5-af97c2218c93", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769649373, "uuid": "c92cd009-abd4-4be3-9212-335a61798103", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5609a0cf-fc15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769653988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653988, "uuid": "6a9d7d65-1480-4adc-99a6-435efd8d47cd", "comment": "Malware payload (CoinMiner)", "value": "ab9ed2ef0195d5cf59dac30880090870", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653988, "uuid": "2486f515-77c3-499b-a53a-f3d794b8d7c9", "comment": "Malware payload (CoinMiner)", "value": "fcd89fa42d24b330d8661064a5d40660b95deff7a741663ff11e8be65cf91af1", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769653988, "uuid": "c303c11b-ffa3-42b0-8f98-5eeb14734755", "value": "T1B1F533CB947514BCF49142F01A9FAF368A0EF297279606CB51967800369BFC32B753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769653988, "uuid": "f3dba72c-2fcc-4aa4-b6dc-7d79d5c826fe", "value": "3641b918fa6fcd6b6754b75fd2065c00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769653988, "uuid": "c3cd2484-420c-4fbb-8c77-7c4e5bcbbc11", "value": "98304:ekSPX+W+vB4jUv4KFm1GKKlXgxEnWmRsq7w:ezX+W+vBZIHKXcq7w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769653988, "uuid": "36b2c376-a959-4b8d-a4c1-c2122cb968ad", "value": 3443512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769653988, "uuid": "3357c9f9-317f-421e-a9a5-7632ef5d13b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9da5eca7-fcbb-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769654318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769654318, "uuid": "2ae4f64c-eff1-44fb-ab07-06f4ae99ca37", "comment": "Malware payload", "value": "797c27ddc614c0318e4553e6bb440309", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769654318, "uuid": "20b84ae8-08d4-4ccd-9ad5-e6a248e0b0f7", "comment": "Malware payload", "value": "c75f5c77b4a4e09a82399dc6156863e2db8bf2fc719b97574690c65e6a0f3ebc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654318, "uuid": "6be8ac02-7c55-4292-8e9e-945c39702243", "value": "T1F0E3E86F83F7313572138359F5A6673896ADC133EB410EE2F9B29A9C8FC11A201761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654318, "uuid": "b58dedf0-784e-49c2-b11d-eeac35e473cc", "value": "768:EZdapEbrTXlGRNjcXscJGcz74k/tHcTwA9mppjsfifRfiVIrePfHKIYroFSnUh+H:EapArrl4k2w2mpFoIrBA4YahJgc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769654318, "uuid": "08daa8c8-8571-4435-a4d6-83d0c2397712", "value": 151258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654318, "uuid": "2e6aa98b-0d80-4e33-aa4b-8cf2147af917", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfd7da69-fcbc-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769654805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769654805, "uuid": "9ffd4ccc-5877-4dd3-afa3-abc6fc00080f", "comment": "Malware payload", "value": "d40062ed2924b41f9d244e95d7fd0818", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769654805, "uuid": "8622c3a3-a644-4168-aac7-61722722b742", "comment": "Malware payload", "value": "60341eea7eaf8c16b91ca7eddb90ea1a255403e72e2e8386d0584fc8d9e1c542", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654805, "uuid": "7dc594d7-e8e4-4884-ad26-6c94df503caa", "value": "T1B8D022BE6C0E082B53D3FB71B43A90368C253001D15B88CF82F9147908CCD7E41C2A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654805, "uuid": "7502ef30-e3d5-43ba-bf76-562c1bff76ea", "value": "3:CpYkN20EFNjJ8S/7A+KWRIJiYEUFLZxs4bSl02rBsSZ7NE7uR0Lq9DISLIoQ5a8G:CpDRkrQWR0iYBtqWt2aSyujLILoP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769654805, "uuid": "0b0a8ff5-543a-424c-90f3-fd165e84d2a0", "value": 221, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654805, "uuid": "102167dd-210d-4eea-8028-bcbaa7473922", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769655018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655018, "uuid": "cebc5c4f-1f4a-4b92-8ed7-b21ae8c748e9", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655018, "uuid": "b9005eb1-8521-403d-b881-9fb640b297d9", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655018, "uuid": "e178de4b-19dd-4400-b4e8-66e47e8313e4", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655018, "uuid": "c4feb2ae-caa7-454c-9969-42936c843108", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655018, "uuid": "89c7c198-ca70-425c-8d63-d7b082d3c941", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05f43910-b45e-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mozi)", "timestamp": 1769655079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655079, "uuid": "cb087b25-326f-455f-af0c-a23d7e3d7058", "comment": "Malware payload (Mozi)", "value": "35fe831cfa6a6d65770701cd88325e0a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655079, "uuid": "c9249032-8290-4ccc-b323-6f9fb86a5dd1", "comment": "Malware payload (Mozi)", "value": "b1d57fd6bcd109a99d5023d76767aa6fdb520138e4eaad2a9a48afb3b6fb98b6", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655079, "uuid": "a020e7ea-0688-408f-a86e-09e09cbe74b1", "value": "T190D312ABCCBA89CEFE6A8FB52617090F1EF6E1D5E5C43D58553B108027F8246A514B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655079, "uuid": "6681ac4c-504e-4e27-9f3c-34f34b2d74db", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6co+:7O/QJHZweEL/NOjCHm7FZZncT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655079, "uuid": "6d9f5cc3-ec2b-4d98-8c8c-84bd761881ce", "value": 136800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655079, "uuid": "a5354d48-bb98-4efc-820a-c5b6f4c87743", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "946bb47b-f5a8-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769655678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655678, "uuid": "1b4cb136-63b6-4396-b8ce-8e0e3dbf7550", "comment": "Malware payload (Mirai)", "value": "87795d3319bc812741a72a8f0f5d0e2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655678, "uuid": "98143ca1-9a45-4aa9-b788-a676ae8dffaa", "comment": "Malware payload (Mirai)", "value": "be3a4eb158b778b1bb36560959317265b9699b283f8fb595a25898aced5d3299", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655678, "uuid": "1341b63a-152e-49e6-8afd-3c64f9c6bb97", "value": "T136232AC66943DEF6DD1705F121F3EB724A72F83B182ADAC3D3A8B86299415C1A1073", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655678, "uuid": "3fdcb00e-c82f-4c34-b0fd-c1a1086ef114", "value": "768:two0c8NF9ZuhfzXdQtcnXK77HKTNIgB4qBDrlJfktjk/urgWm5iaq:twa8j9Zuhf7dQtcnXK77A7TDkkWrgr5V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655678, "uuid": "8f70763e-4a84-4ef4-9ba4-d3ad9e3b77ac", "value": 47512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655678, "uuid": "c142d8a5-ce5b-4258-b9bf-078bb81a2b54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d876638-f9cc-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769655678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655678, "uuid": "1482c8b6-e07e-44b7-8a75-3cb8250b336e", "comment": "Malware payload (Mirai)", "value": "91f67d2631540d03c0f92d65ed9d56ea", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655678, "uuid": "91ada1de-93bb-4801-8ef2-32eaf112c842", "comment": "Malware payload (Mirai)", "value": "cb5bfe0ea43cb35262a5d94b8cc9e6df5067e267b605cf45a9845d9535a6d309", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655678, "uuid": "455a1028-013b-479f-b48f-d3a35b10c2a8", "value": "T11C53B60A3E219FADFB9D83354BF78E20564437A62AE1C184E15CEE411E7078D741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655678, "uuid": "2b92f068-52f5-483c-b33a-a14874018346", "value": "1536:z7i2RCg3JvmzaIxSf14VGOHINseBm4QLfY3ZoV:zNRC8szaBf14VnHjeBm4QLfYpoV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655678, "uuid": "f73850aa-850f-49f4-a72e-1bb742efc7db", "value": 65880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655678, "uuid": "79dc1cdf-3b6b-47c1-a9b9-8213d687ffd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1769655679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "998dcba4-e9ea-4872-acd3-523da192d04a", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "df748a30-60d6-46ea-aade-ef279f13c615", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655679, "uuid": "37c390ec-d4fe-4274-a249-b4ca67b0b60c", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655679, "uuid": "ac069b0e-3f78-4fda-a193-4834a9e46ae0", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655679, "uuid": "7337fb17-a2ec-4da1-bc65-bf7df50db6e3", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c91246dc-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769655679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "7f795634-9981-43f0-a34c-a0f358bc574c", "comment": "Malware payload (Mirai)", "value": "c972c33bb8d58100df97d47ef5abda64", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "cec0fb23-271c-4fe7-a4bd-127f8002e7d6", "comment": "Malware payload (Mirai)", "value": "b7789c74715054973630602d29262156de756fbeb6552b47f08fd64c64503226", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655679, "uuid": "717834ee-f24f-4278-bd93-5f79bf885b50", "value": "T173D34951B8825A27C5D523BBFA6E028D332963E8D2DF71178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655679, "uuid": "9f6f37d1-708b-4b79-8743-1bd148b08ef4", "value": "1536:frC6uZMkwCc5xFKqJ2AjHSUIOQYacwV84V77cZLp9BoGU2SNbLlliyymd9CwjMiK:frCukwCoqUI8677cZFox2S5llHnbtw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655679, "uuid": "598a6a05-46f6-4969-bfed-e242f9a5c68d", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655679, "uuid": "2ce992a5-aadc-4678-8839-d4ca0a2e8e9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9168104-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769655679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "e4771d7e-e3bb-4d03-9dae-32f247aea6d7", "comment": "Malware payload (Mirai)", "value": "4c1e2db57a3327133db34dbe223664f6", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "a0b2ee69-5ac9-4732-af8b-c6236983922e", "comment": "Malware payload (Mirai)", "value": "b9536db7dfec9b6b1f41950fe63f86159992d141d13c642ec7865c5825a250c3", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655679, "uuid": "36f69af4-de05-488a-9c73-9d53bd658fc8", "value": "T110041916BF110EFBD85BCD3B45B92B0124DC585A22E97B3ABA34C418F54B25F2AD3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655679, "uuid": "5e9c34e6-855f-46f4-a54e-e2f8c3e4d6dd", "value": "3072:fiN3JMJdXC9yVGNOjyqHtzfTZjc2Slfx2BncNpj:fiBJMJdXLxlfTZI2SRx7N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655679, "uuid": "98e4863e-832f-40bc-a1b8-b479e135ecfd", "value": 177004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655679, "uuid": "cec66e00-3f67-4d38-8eb7-c444bf7973b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cc0b6bc-fba4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769655711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655711, "uuid": "ec5b32f0-4661-450c-b9cc-a07d98b259f5", "comment": "Malware payload", "value": "c13469185ebcd16c9beacf940362e250", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655711, "uuid": "94d881a9-ed12-4924-aaf1-5a4be9548c5b", "comment": "Malware payload", "value": "fc371b37133095cdb9d9e55d0a7aecdaf79ef96163f292c576399e8d270ac224", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655711, "uuid": "e72ecc56-a0d5-42c7-b755-c5ad16184a6e", "value": "T12F31D72CA3B1F146E6A24675C27862079A031AAE9250E0993596380F6A977591CD7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655711, "uuid": "253d43c2-9c5e-4f43-a61d-84c87b842460", "value": "48:99deRN/CgwEs/UQa4px+VgeZFfT6y+XRgwjP:/deRc1EdLFLNWRDjP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655711, "uuid": "eb74d580-1c17-4966-a624-e072d1a415f5", "value": 1576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655711, "uuid": "be0db6fa-da30-4d62-bb0c-3ea398efbe60", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9343bab-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769655733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655733, "uuid": "b97e9dda-15db-419d-8dd9-9fbc548963f1", "comment": "Malware payload (Mirai)", "value": "34e7e5e8e2c9d5871d5a2da5b0095d84", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655733, "uuid": "245a26a9-a71a-4a94-9f6f-d568678408de", "comment": "Malware payload (Mirai)", "value": "27ced90c40b77bff8a29681b2e2598dc13b2660138b103122acfdeb2c4f5d616", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655733, "uuid": "f15f9605-cbb2-402a-ad8e-562ce13bb697", "value": "T147F3D60E6E25CF7DF7A8833447B7DE21966837832AE1C546E16CD7105E6028E245FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655733, "uuid": "a89570ac-6403-43db-b0ee-c95ff7a04439", "value": "3072:89Ar7T2y0qDZ/jqhJJ6TvPFY4LUuohgJk3DbMxkIsIZpSkrpQQG9jg9/FZ/NKGV+:89Ar7T2y0qDZ/jqhJJ6TvPFY4LUuohgY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769655733, "uuid": "bd9c895d-caa8-4eeb-a5bd-4672e0061fca", "value": 170796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655733, "uuid": "ec6c6c2e-e4f7-454a-91f1-275415620765", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a96323f9-fcd2-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769664216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769664216, "uuid": "5557ae59-9cb9-4bf6-b240-4b2c67aa8df3", "comment": "Malware payload", "value": "9057eb02ef46a306911d425d95dd6d21", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769664216, "uuid": "8b742ccd-1896-4c3b-ab4e-df1d08f66e74", "comment": "Malware payload", "value": "8044c4a2607106addd29dd41cec20ae4caacc3eefc2ba2b25afe9246d11b086d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769664216, "uuid": "347f1c7a-057c-4a18-9fca-c20b20408273", "value": "T190552356B691C2F7C07B243184D5C6759BA935319721B6D3B7AD2BBA1F102E0A33A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769664216, "uuid": "9e19f2db-56fa-4de0-8bc3-08b2bbf5d72d", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769664216, "uuid": "73fceb8e-8e4f-4227-b39c-f4f79bc04eb3", "value": "24576:Tk70TrckfmE6WfF9Kj2Rv4y+QLHxo48FUNEWGaRNR6gOc+Uxk3RiwfqH1:TkQTANEpfF9424y+QLRoLUNEfMQpUxkO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769664216, "uuid": "01b6c73b-d920-47a3-b19a-476efd6568de", "value": 1301504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769664216, "uuid": "cf8450ba-6961-4e08-9a6f-8f2a22688598", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c40d0387-fcd2-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769664261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769664261, "uuid": "7a6873f9-fc13-492b-8063-f4d43e326c68", "comment": "Malware payload (Mirai)", "value": "7b0e378d2912f4cd64d324cd886eb989", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769664261, "uuid": "0bb525a7-b869-495e-9813-b552b911f10f", "comment": "Malware payload (Mirai)", "value": "f9b9e3dc95a05ec257f98e0576ec0705fa3056e1649151770ac6a7b86cbb4b5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769664261, "uuid": "6f4746a9-17bb-4c7f-bcf2-aeedbc5e146f", "value": "T13F73026B474BE4E1F350122B7A0D5508FF87D93839A667D690068BFB9F91A4100BED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769664261, "uuid": "44498efb-c72c-432a-94c3-3f73dbc07386", "value": "1536:BEsCUgljoLUrrqdXBPEs7Eaif1Kv/3PMvcPfZEcF9EmwmOqpv0KUrD+B+JMiEedx:iZUgGLUnqhD4pS8cjf5Ak+JZEox", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769664261, "uuid": "748365e3-3ecb-4a4b-86ea-9d511c5cc6ba", "value": 79392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769664261, "uuid": "8f243921-d3ca-45be-91ee-dbe008cf17e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da4d95ca-fcd4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769665157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665157, "uuid": "7369b2cd-02a9-4dce-b06f-e6008b892d1b", "comment": "Malware payload", "value": "ddd09d82588cec93e7b22a96ba677200", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665157, "uuid": "6718a109-3948-4a10-b5f6-44713025eabb", "comment": "Malware payload", "value": "8b25ad72ad7ca85b32fb71e4ba29b8000a26e6c595b304e6783e201808bff63a", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769665157, "uuid": "138108b6-93aa-4215-83f3-f47c73dc5890", "value": "T1568633097586DBB1D5EBE23A5FF19BA2DB3E243087B405CB398917770A796F292310", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769665157, "uuid": "6fec67de-6460-4a84-8fe7-2ea288d6c228", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769665157, "uuid": "44a409c3-6f06-4dc4-9b16-c088c49c37fc", "value": "196608:xnrgI0mgDUXNGDEPmJ7+vZIQ+KlN4/rbxcKWD53O:xgI6DGPu1+hl7liGKWDE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769665157, "uuid": "bccf4d7c-f754-4cc1-be76-d24c0cc75a1c", "value": 8527360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769665157, "uuid": "97a3c721-c260-4542-ad65-78fc31f486ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02c28665-fcd7-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769666084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769666084, "uuid": "4144e465-c036-4495-822a-2500c164c369", "comment": "Malware payload", "value": "6edd360b4196d8fbc6858d16b736d8d7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769666084, "uuid": "a23302ee-9f4d-42e5-8b52-0d1d51413147", "comment": "Malware payload", "value": "bdd4494b5b58aee341954f6bf60c969e350b80da6c4424acc9d25d7620c62089", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666084, "uuid": "f26af07e-b93b-4911-bc25-3d00ff0296e2", "value": "T16134019ADBDB23014312BF56773AD5B0A6FD47EE3301A461BE127A00786443B94D35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666084, "uuid": "7eb1f1c8-a60e-40fd-b44d-99ff2dcc12af", "value": "6144:ffWTENN3a+jnTIiwlM652R/ix/Q+P/rV7IObTMo:sFin2l3M9A/Fp7F4o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769666084, "uuid": "941d252b-d16f-4a5f-9d59-96378d6ba323", "value": 247906, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666084, "uuid": "0aea33dc-d8b5-437c-9a35-4c5ac622a578", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f702fdb-fcd8-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769666749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769666749, "uuid": "aba1a26f-6f22-489f-aa7d-2e52f1239187", "comment": "Malware payload", "value": "43e69a5e0ee299437ea8f9ad263d5f44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769666749, "uuid": "3cb7e582-14e5-43ca-b3ad-f2d26b3bb76a", "comment": "Malware payload", "value": "8ee4e8920137085003832379c5d0aa3d1775c34fcb7a7394cc20a738473e6ddd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666749, "uuid": "8552deb0-a105-4d3d-b3d2-5aa382665ace", "value": "T127A3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666749, "uuid": "761bc388-5d5b-469f-bf7c-552db8bc7f18", "value": "1536:/4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAe:AgVBH3mPm+sqk+HAw0F5KijXxe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769666749, "uuid": "ff6a83b0-abf3-4071-b069-820da67a1077", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666749, "uuid": "d6a6acdb-cef4-4be0-817c-b68336dc2fb0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eddbbe81-fcd8-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769666908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769666908, "uuid": "140a8bda-3da1-46ee-b455-fbfb8e3d272a", "comment": "Malware payload", "value": "f7c593885e90d0e2d3353f755c386b4d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769666908, "uuid": "a30918c1-c667-470d-b17f-82a991a48941", "comment": "Malware payload", "value": "d002ad315b1aed39aab6b2594c4c67b33a4e4f990a9219f5838d773def9426de", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666908, "uuid": "3848073b-3280-47c7-9a92-449e04b0676b", "value": "T14324E1B20F5CB5733D28693A8490387F6DD49C3E28576D921DCE22DC59B2B60328E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666908, "uuid": "d52226cd-3b4e-46ee-8bdc-07264ed64e8e", "value": "3072:E4os+EBS2o25VAicEtSlKa0V/52g6/oFjavlicLLnTS2Yfv17oa6HGLqoKfVoCCi:h1Ul25zuR0VR2Zgja5+7oa6mLCtZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769666908, "uuid": "93704a8f-12b9-4a5e-b29b-809c4de5f231", "value": 213598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769666908, "uuid": "539302d7-e05f-4857-a264-d6bc18779018", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75ae405f-fcdc-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769668424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668424, "uuid": "a4c95b5a-21d8-4293-988e-5bd6534a4768", "comment": "Malware payload", "value": "bc26746a2dd0790bafc9ad4144649357", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668424, "uuid": "728396c3-0999-4f16-9c57-850c74fc7f45", "comment": "Malware payload", "value": "9b62c36d5950f3a1bb98dae09113ef9890aa0e33cfa94c4fe5b71c4e36bb769d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668424, "uuid": "4d5a400c-48e2-4991-b743-df772d897de2", "value": "T19AE3F96F83F7313572138359F5A66738966DC133EB410EE2F9B29A9C8FC11A201762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668424, "uuid": "b4ef0fda-204f-4940-a86d-4dbf85bf6786", "value": "768:tZdapEbrcXlGRNjcXscJGcz74k/tHcTwAQmpp3sfifRf+VIrePfHKIYQoFSnUh+p:lapArIl4k2wZmp5UIruF4BHhYTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769668424, "uuid": "3e118fc5-e94c-4b24-811a-bc0861b8bedb", "value": 151144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668424, "uuid": "7d11e4b3-4cc7-4eae-b6a5-e4cf54652b19", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "191686bd-fcdd-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769668698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668698, "uuid": "ffe6d2c8-b3c8-437a-a63b-42a426c70129", "comment": "Malware payload", "value": "01294263c6ad945dd48e1506ad91da0a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668698, "uuid": "d6bce3fa-b1ec-4843-b102-ff1aaab0c01c", "comment": "Malware payload", "value": "e8254f0c8c46a32cd53afe56661a64700920e3bf31d0ce39387ba961aace74c6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668698, "uuid": "5ee52941-16b8-4dd3-ac9c-6db56a8def4a", "value": "T116F31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668698, "uuid": "5ae36b84-e865-4dca-a192-96cf4fb55b86", "value": "3072:EdrK2iu5mGuE/kDkank71vQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas06:aru8GPAMWLasneH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769668698, "uuid": "9001b514-25c8-4e49-a601-f9321e8f928b", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668698, "uuid": "659f15d6-27f2-4ebb-bf52-2ab7b5a7cf2b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28ad625a-fcdd-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769668724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668724, "uuid": "5bd8303c-665f-4c51-aa88-20a67f954060", "comment": "Malware payload", "value": "c7b8c19619f87001afdb424a3f3ea52a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668724, "uuid": "5df4783e-80c6-4b55-9416-1aa807660bac", "comment": "Malware payload", "value": "b4eb9fc2501e884ad4893e3d01846aa0019fefc2199750373008d48cffd8ae39", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668724, "uuid": "7bbe5e0e-dff4-4e22-b0a5-e13ca9e23f4a", "value": "T1D434F17349AF414D63DB1491D479BACCEF290DB0A735052F8A07A408B72F835BEC96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668724, "uuid": "766a66b2-0274-4b84-b801-9fe5d15d0adb", "value": "6144:0rcsgDy+yLnovN8kePCx6cXRYWDuhkkD6hef208kYcZVHrc9K:0rcXy+yLyuax6chY9yY20+SVH6K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769668724, "uuid": "46147300-ef5c-43dc-b4d1-94690ec43257", "value": 247900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769668724, "uuid": "9cabb6e3-7606-467f-a923-72ef1a4ddef8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d51cbb-fcdc-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769669435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769669435, "uuid": "3ffd95d5-b598-4eaa-b828-d1537cc3f014", "comment": "Malware payload", "value": "c4dfbdf02ac3cd7a1ea0c332872e30c6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769669435, "uuid": "2fd4c58f-ed57-4ca8-97ee-d34d03202edc", "comment": "Malware payload", "value": "e32f7111e396c806791c632a20b5fe113e9548350158dee12f5e5b48b6328039", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769669435, "uuid": "d209b4a5-9f23-40bb-954c-381ac7071c83", "value": "T1FA310A5043BA3147E4223B3713C14A978BB1C7DB99500A8189300BB267B11DCEF318", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769669435, "uuid": "fa1c7d54-685f-41d3-bc20-423793e658f9", "value": "24:9v/1G2EEH4KIaGRivt5kCIre90Gg3dLkqYSzhfkEEnP7xP2/LnKNjJRohnnw9vY3:9v/9jtaIkCaB39PnFfwP7J2zI/0UZp4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769669435, "uuid": "ba796004-5be7-475d-8ade-ba2c92b355f6", "value": 1602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769669435, "uuid": "1264ceb9-924f-4880-924b-c5bcb9ae51aa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2b6d841-fcde-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769669493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769669493, "uuid": "f013e22f-6bd7-4648-896b-24495c9d0f74", "comment": "Malware payload", "value": "67f45a6e6d3191502949ebbaf7903913", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769669493, "uuid": "300d21b3-21e9-4738-bcf8-93fbc185cbf5", "comment": "Malware payload", "value": "a70514009e86709dfd18f2de5f171a3aedca8c260003a95ab954f60a27c11420", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769669493, "uuid": "6c4ada27-e07f-47a3-89a1-a8fa8f052229", "value": "T14DB633E038A1C160D0FF7BBD84E586A4494A78F6434906A3B79C0D09BAEBF64F3745", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769669493, "uuid": "cbed00f8-2554-4c92-b9ff-939e66c9dcaa", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769669493, "uuid": "100184ad-2562-4120-9277-c84d5e2a24db", "value": "196608:57UkRMlmflQGRzFE5L2Db9noj0SsexSkNC4DIf4eBHPOcY9eX4a9szjUoRl:VMQlQ8sLBjZiO1DIgeAcieX44szj7l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769669493, "uuid": "0f458831-b5b0-4401-9b8d-005f94ca11ce", "value": 11202048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769669493, "uuid": "87b7343e-db9c-409e-972f-8964db215ea9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "130d3e61-fce2-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769670836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769670836, "uuid": "9b777664-0b25-43ba-9f2f-ebd95084e6ca", "comment": "Malware payload (Mirai)", "value": "edea1af8552b4becfb4d825975426c43", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769670836, "uuid": "d04cca32-1d8e-4878-8c8c-a1b17d594e04", "comment": "Malware payload (Mirai)", "value": "5a12b5a8aa5d5af1d2857c3dc78cf1e91891bf1e9d7e98b81f6775b1203080a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769670836, "uuid": "764904b0-0a18-46c9-8d57-3f83c7158c5a", "value": "T1CCF31A5377324F80E766D6720FB38B5959EB11812EE248C5936CCB103A207E9689BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769670836, "uuid": "19fa1ad0-a9cb-4f28-b4e7-69fa275bb974", "value": "3072:dZHbsdkK6CoziejNLQxxgVRNFxCzYTGWCmypPJpb:dJbs0RjNLGuVzsYH7u/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769670836, "uuid": "fe64d7ee-c4f2-4595-a702-ae276656bf79", "value": 172088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769670836, "uuid": "de249d1c-15ff-4577-bda7-23637b934c28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf897ab5-fba7-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769670870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769670870, "uuid": "3dec0862-be10-40da-8530-c12e82800a26", "comment": "Malware payload", "value": "6007c372a51642fee963ebdecf81ccbf", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769670870, "uuid": "1e8f0697-262e-45f4-a58f-2326baafc4f2", "comment": "Malware payload", "value": "15e6a909752242da0f6f2e96bb432811d45940efed83537c5bf5da3708a1bedd", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769670870, "uuid": "ad4e260c-d8b1-407b-a746-a4895871b70a", "value": "T10531DAD90703E14AC3D7463097F77F11C5C1A534126ADAE5B83AEF631B1181915637", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769670870, "uuid": "fbe303f7-6728-475a-89cd-5fb6372ad2e0", "value": "48:9sqYZtubvr7W2OhZOYAE2p/iG6yPgWz9sJ5rQi:xct+qU42xt6+dhuZ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769670870, "uuid": "f387bed6-7099-4788-8492-23888e676964", "value": 1563, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769670870, "uuid": "446f1278-6960-4eed-902c-a37724dca1d0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e182fae-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769677297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677297, "uuid": "fd5a9d2a-2fbe-40a4-a799-deec2feff0f8", "comment": "Malware payload", "value": "a059712dd38035216e3fa249d7a37b9e", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677297, "uuid": "b8acc870-6da5-48ba-a3ee-71376f8b0d9e", "comment": "Malware payload", "value": "3942813317d2bcf00a9b373bd4a8f34118be7c7975f0cd38bf90f7d02c817f27", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677297, "uuid": "fc0b4383-ace6-4de5-824c-85cd933345b7", "value": "T1133129588BA8E1D7C8B787764386C20319CBF2040829A8F3635DB0432F879E52B789", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677297, "uuid": "b868c1c8-2813-4c87-a032-687238aeaf8d", "value": "24:9eB1iI/r/vscG324+kAUDelUlAnw9b6H8AYzhdSbbzCWsaOujT6aMWffovTrFf6:9eBEITEcGm4HAsEUanwt3AQDk+ykTr96", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769677297, "uuid": "c434a784-2c0d-4bef-b8bb-8a26a252a3fe", "value": 1570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677297, "uuid": "aafc6d79-760e-41ff-a549-d8ba6d006531", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c3c7877-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769677401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677401, "uuid": "f89085df-1744-43ce-af64-45cc3df80439", "comment": "Malware payload", "value": "76e85294b9ca2ed629d3a960d94e127d", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677401, "uuid": "2e7a8f91-ce82-411e-835e-93aedf56cfb6", "comment": "Malware payload", "value": "f0046a0525b3c14f54c430f180e5f234d2ae78703a1d5f448c9eb214cbefbe8e", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677401, "uuid": "697742b2-176c-4138-9bf5-c00103a4fd5b", "value": "T1B3071A97B8924953C5E43677B8BE80C432630FB98BCB66565D04FE383BBE5D90A393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677401, "uuid": "810ff187-8620-41e1-b35e-0ad84fdb9491", "value": "98304:lWil0uGolLgJwEWXIgI9K66skPEcUZUcTB1Nov3xrjtnVOixWJn8vZ/3tpQC4gGf:lWVuo/K66skPEcrhVrxWJn8wPHXR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769677401, "uuid": "0bd98f20-7e24-4f0e-a89f-0d8ef8b8f50d", "value": 16908472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677401, "uuid": "21dbc8cc-ec9b-454a-8851-5175ee992a2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fc99af6-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload (CastleRAT)", "timestamp": 1769677514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677514, "uuid": "d7a2daa8-8a01-49dc-9ec8-becd155e3e78", "comment": "Malware payload (CastleRAT)", "value": "e8786eb5422d0ae3694b7e0b85575631", "object_relation": "md5", "Tag": [ { "name": "CastleRAT", "colour": "#095cff", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677514, "uuid": "820a6473-b283-480c-9e98-b4614984f572", "comment": "Malware payload (CastleRAT)", "value": "cd98020335542711e7520a2ed134aaa9ca38cc4d729f743a67190cdaabe49ecc", "object_relation": "sha256", "Tag": [ { "name": "CastleRAT", "colour": "#095cff", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677514, "uuid": "54f336af-5f7c-486e-aeaa-ab0f9a3914e9", "value": "T184F53328B3CA56ADF165D23F23C15D8FC61E9850CFA986E52C6E088D59B7A35D3220", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677514, "uuid": "3a63ea56-db09-4c7e-9937-739ae0236dc2", "value": "98304:DLLIpnlQr0t/yPCCBH0j4/NzQAKsdr46Qx:DgplsH0MFzBdC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769677514, "uuid": "b8b92b88-261c-4522-9452-c97d99447bcb", "value": 3622255, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677514, "uuid": "337ca0c8-668d-492b-a4b8-b885b3bd6c8f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0876757-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769677515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677515, "uuid": "10a223e8-c098-4f42-8ee9-c3207a2e5f2a", "comment": "Malware payload", "value": "00d29816005fa9eb2f054876c02c3759", "object_relation": "md5", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677515, "uuid": "d53e5991-1ff8-4434-83ad-a1bf0d2de3d6", "comment": "Malware payload", "value": "4ce977944d84f4d1c16033f4ece658c6deb9b66333c19f6d8a94be275ceceac7", "object_relation": "sha256", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677515, "uuid": "df7d2c56-3e4e-4945-bf09-1fbfe85cf721", "value": "T1AC873311B85EF3E1D5E564F0C834ADBD416DEC3DD965C80F26A43E1A3AF2A80E3746", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677515, "uuid": "4016622f-b523-4fa4-987d-3f167a30ff43", "value": "786432:JmE7rb6tkj01T4YQc7926u6xhqiY2Bt7FekUtZv0Aereo:JtitkQTI6JL1extZHbo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769677515, "uuid": "0c2fb594-4e72-4f78-b8c4-3c9b8ef44afe", "value": 39250944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677515, "uuid": "893f16e0-16c9-4419-a406-8c923342c384", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0a52c5b-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769677516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677516, "uuid": "eae15ce5-8da0-4c9c-bef7-25c59e5b52cd", "comment": "Malware payload", "value": "51746eaaed767fabc864e9c39904f53e", "object_relation": "md5", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677516, "uuid": "9df0236a-9ea8-47b7-8b54-f82e67dc5a97", "comment": "Malware payload", "value": "36ac8b5f88239872df0acb7344736a4d98a6628ca9d44799ecd6cef0ffcf1cec", "object_relation": "sha256", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677516, "uuid": "62dd63e1-5682-4822-88be-e7ffc3e304ac", "value": "T1A3373396B782856FD47B873D51ED9008F2BC6C30DE3649061E9CF67A2C736D063BA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677516, "uuid": "3b428652-e8d0-43d1-873f-6d5dfda22097", "value": "393216:qhK/84Q/NMQD3vibmKaRntvQ/we519IZie/XiziErgSwgBF+ewIv5ZkIMz:qA/84+lVKEtY/LnsiiXiziNSDBF+ewC6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769677516, "uuid": "61cbaefa-6ff6-4ed5-a25a-f0cd5965f49b", "value": 23117824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677516, "uuid": "aa2d4140-58a3-43d0-a62d-0d1a90095ef7", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b065bf0e-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769677542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677542, "uuid": "200099e0-1298-4c46-99ad-14ecb4a2d366", "comment": "Malware payload", "value": "57f0ceefb82fb4bc010812ae21a8254b", "object_relation": "md5", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677542, "uuid": "dbe68808-3ecf-4dab-a497-036203ba83ef", "comment": "Malware payload", "value": "65fc54325fa2419a6e3d120b95d84877d753e03a31f4572fcca1193d169b0789", "object_relation": "sha256", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677542, "uuid": "8ab660da-cc3e-4f19-8ac2-f28eda869f7a", "value": "T175E733B1B9A5E601F546583DA67A473C44FE1F3498020887F2667A3F40B6EA0767F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677542, "uuid": "125b7eff-6813-4002-9c41-1e541df149d8", "value": "1572864:dFXQ0aiC/wNPiGwxEew9RHVRhjaUJIkbmmXY3YRU2RJ7Dl9:Xai+yKGw6PHfhjaLYo3YRU2v7Dl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769677542, "uuid": "0cc5a159-5289-45cf-8232-276550840163", "value": 64316416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677542, "uuid": "48996e39-1f4c-44a7-a2c0-69a584a79d5d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "269b24e4-fcf3-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769678170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678170, "uuid": "a0e2cd82-edde-4a2d-90da-8b24401bf1f0", "comment": "Malware payload", "value": "1576034d42064d349d8fe722de64aeb7", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678170, "uuid": "fe643301-2dbb-49d7-aedc-d5f95b9ab397", "comment": "Malware payload", "value": "88610c209a9830e1ea0b84dba823aa1f401bfd375a19e7bb1d9c740fab41cdf2", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678170, "uuid": "f1d4f119-d623-4ae6-bdd2-061a4a4dbf09", "value": "T1CB95336B20AF0200D4DC52B86927FFD52FEDB5B1896014B9C66A5DDE3F096B0E3471", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678170, "uuid": "323df8c7-b95f-4b1f-a657-5dafecf47de6", "value": "81bbda50a2982e0e014acf537665f7af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678170, "uuid": "63f6b238-8323-4dca-98fb-2c18c6d406ab", "value": "49152:1q7cteI+/TG9uIwSI3YxSp5OqbrKIV37OnNp:U4YDazIV3b2Oy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769678170, "uuid": "d0355266-2599-49c5-87d3-6e0c3c1063f4", "value": 1886208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678170, "uuid": "7d9d05a2-3878-4b90-ae36-6e0b8fdd8c15", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbc4616b-fcf3-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769678420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678420, "uuid": "3162b85e-e746-4469-a24f-7244e4e649d5", "comment": "Malware payload (Mirai)", "value": "41f76173cad2783ec64169b44de0d171", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678420, "uuid": "9edc412a-369e-4a38-bf0e-a50ec3ddbe32", "comment": "Malware payload (Mirai)", "value": "f74c82c52ed2e39e3a1bb75ea2658b59da288da3d6160b297cf5ad17765f8e1e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678420, "uuid": "50d8edf0-c928-4759-929b-2b5f154c2875", "value": "T14423F1944D49982482A35875D83B2A41564B6F7DE3CBF4423AB10F4AD3E9A525EF83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678420, "uuid": "620c75f7-eb6f-48ae-b231-5090f398b549", "value": "768:5CkBVhypBTBfvrjuKcyWiqIooq6aUO3QDi2SPX9q3UELR7Haq2dUWBjgDFbAX+7f:jfhypRxjuKcysI9xaUOUO+LRLaqo7BjW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769678420, "uuid": "928f2505-e456-4e56-b600-e5a0322b265a", "value": 47092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678420, "uuid": "4c91e9d4-e39c-4a48-8c5d-b3be16cebd59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea516952-fcf3-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769678498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678498, "uuid": "12831c6f-4624-4f9e-9bf3-2eed5a96dc19", "comment": "Malware payload (Mirai)", "value": "32a216faad450d97769e97d1efb13dcc", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678498, "uuid": "c125cd3f-975f-42cf-9a77-a7f53b0fccd6", "comment": "Malware payload (Mirai)", "value": "26e1c7ac50319b3bacf336cbaaec770caac9bc9ceb6b9b87fceca53ecef664ff", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678498, "uuid": "8aee7e97-6845-4c20-9e04-794f81c81072", "value": "T116F4F71A1E329F3CF37487318BF34B24D66D62D613E1D685E2ACD5154E2028E592FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678498, "uuid": "2c25e7cb-5c12-45f4-955c-4194de74764a", "value": "12288:MmhSflhZNoV0owAkmbHDEyxhOInQK/qkdf1J:Mmkflh0yowXmbHDE6cj3w7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769678498, "uuid": "c73fc4f8-5d65-4e2a-8a98-17befd1e5c1b", "value": 763252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678498, "uuid": "97116be4-fd45-42ce-a347-dbebc208bca1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a7e69ac-fcf4-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769678552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678552, "uuid": "e675dff5-5865-48d5-95a7-efaa0ef1f592", "comment": "Malware payload (Mirai)", "value": "7e461f589e07528719d8f4d6afed216e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678552, "uuid": "4bc66306-fc61-4451-b45a-1e364ae5b029", "comment": "Malware payload (Mirai)", "value": "d5c6eb3b0d533670a18c1cc9f609524399984bdac31a84d2306141a3fadc7fac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678552, "uuid": "35739cdd-eb0b-4d39-be9d-f9ba17ee890e", "value": "T1F7A3ADDBB3071191C8664BF00BC74B9D3E2762119E2788E77C1E29B9587A1DF8A077", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678552, "uuid": "662fe3a1-32eb-44cb-b0c7-1005799db893", "value": "1536:gyAtuwf1iAqQC65nKYEUwAM/53/XtEJqgC/LWe:PAtuwfAAqQ5877F53/XtEAgCq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769678552, "uuid": "0e64db21-c679-4a8a-94ef-492c1467dc99", "value": 99704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678552, "uuid": "41db8d19-079f-4571-ba14-f02c6e033f1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fa4d4dd-fcf4-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769678776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678776, "uuid": "2a7e2518-4423-4747-956e-48a95dc60610", "comment": "Malware payload (Mirai)", "value": "1c6e6f81ce025cd9a6206f1c4f2d1c07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678776, "uuid": "c0b458e5-adf7-4889-b206-aee928ec9d5a", "comment": "Malware payload (Mirai)", "value": "47ad98f1c72bf29d0791b1f22a6d62bdfeb18410eef72d25b61d671ef013c88a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678776, "uuid": "559e4855-3edb-4d6b-9cf5-afb570a0023f", "value": "T1C83302B1D70E6D55F62466332DB6CE42B8F33AFD40EB7AA6142948343AC1D4721844", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678776, "uuid": "5715c161-a07f-4e58-a137-18a3de7aa599", "value": "1536:seiFIdWF9X4lNyTWUUhh1HLpHp2ZfV8LJ:xiedWvIlNOW9hhZFHQfV8LJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769678776, "uuid": "fb745330-f7fd-495f-b92f-96ec440ab83a", "value": 55088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678776, "uuid": "02f48532-e0b3-4a72-aacd-a89c3ce863bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b71730b8-fcf4-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769678842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678842, "uuid": "eaccb527-1b2c-479a-a90c-8f7649d02900", "comment": "Malware payload (Mirai)", "value": "2d3ba446bc4c49022e5530fca1a3f54c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678842, "uuid": "caae823e-ee02-4d49-8a0f-701e1419151d", "comment": "Malware payload (Mirai)", "value": "fe9e87095153191ba77fd7eed720b0b1ac1ebd39176c9b9926b2af899b585075", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678842, "uuid": "f1f81ca4-7a1f-404e-a139-c1d59a7748a9", "value": "T19DC45B59A8419B95C1D06BBFFF1E934873131B38E2EFB106DD186B247A9BC1A0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678842, "uuid": "81bf90a4-6f2c-4ab8-884f-38052cbaafd5", "value": "12288:QtywkKil//OdRL7TxQHCzMlkKEiKYRRRUqd1z0KNxEfGAZlYfg+zRc:avdRLBQHC/0RUSNzELls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769678842, "uuid": "ead114dd-2d94-4e7d-92e6-2ac43f7bb5d5", "value": 592596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678842, "uuid": "8b9a37a5-7919-4733-bde2-f96e584a2225", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f547d447-fcf4-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769678946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678946, "uuid": "0d868c38-4709-4524-becd-3432cba54942", "comment": "Malware payload (Mirai)", "value": "eb6e79632247c810a838e7633023ce3b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678946, "uuid": "92a3368c-c42d-42e7-a279-3881a868b6b6", "comment": "Malware payload (Mirai)", "value": "50825416445643e9f0395618392e964f6668bd7090cce27dc5e61421b12523b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678946, "uuid": "de177fb0-efea-4d04-abf1-6957497ab2b2", "value": "T1A3051A06AF503FFFD46FCD3706A58B0A258D994622857F793578D804BA5B10B8AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678946, "uuid": "1af7da2f-84de-4a81-9aa5-53da9fa576a6", "value": "12288:rsFWt66RZg3f2tBM1zuclFOHigp4VtFmszVv:AFWtnRZg3f2U1zucfOf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769678946, "uuid": "ee857fef-9fab-4338-b9a0-875a5cc461f4", "value": 848108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769678946, "uuid": "7d69d77d-6731-49b3-8ead-9471c0c928e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c290eb95-fcf5-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769679290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679290, "uuid": "2b597601-22cf-42d5-a275-3cd363b2f143", "comment": "Malware payload (Mirai)", "value": "96ed199937556dddcf2d8c692b24cae3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679290, "uuid": "c16a3f32-8b79-4125-a5f7-3921791d42f3", "comment": "Malware payload (Mirai)", "value": "b3a8a0f242041630931fbe99484290b342866b3c98e658fe83961d0f4219e91d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679290, "uuid": "1a4d0e85-023f-4364-885b-4ab7c6c7c13e", "value": "T127C43B55B8419A92C2C06BBBFF5E834873271778D2EFB006DC195B643AABC1B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679290, "uuid": "01a859e4-6428-4dab-af26-07d63cb84339", "value": "12288:zEtdUpsj6HvfQHaO8P7iGiUSbdNI/YcPWQUorrnu0Wr51Q/jnLIjw/vh+GsvExvM:zEEpg8PbSsScubYZx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769679290, "uuid": "81da1fd8-61b4-45e1-b313-64437542907d", "value": 584780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679290, "uuid": "67a52dbb-37cd-4027-affe-4c2697591803", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fadd898-fcf6-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769679554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679554, "uuid": "86da4367-afd7-409f-995b-e23319979a1d", "comment": "Malware payload (Mirai)", "value": "8ff6138f9e6e8d716dd409e6a543833e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679554, "uuid": "0fc528e5-4bb7-4f6a-9837-381494b3f913", "comment": "Malware payload (Mirai)", "value": "8fdcb319f873ec694db9b2f0572e6757e0c89c16927e9911cffa82e7ea5e1098", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679554, "uuid": "2ad379ed-0a60-4e9e-b483-5217475505a5", "value": "T13282C053BAC6EF64D6309C32CEBE8687DBF502BDC0FB301725641268A68560156BCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679554, "uuid": "cd278d96-8c06-4222-ab16-f3aaf3ff8e40", "value": "384:TZxEuHvpIud3eJelm9awUn76loW1AX7oqMe9P7DUxnYfxihymdGUop5htBlo:TouPpIudOjawI7kotXRcgis3UozLBlo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769679554, "uuid": "82943376-01a2-4027-b107-aab21122f753", "value": 18788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679554, "uuid": "d644dc2a-a34d-4756-8142-48c0c4b3a16c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a10df36-fcf7-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769679947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679947, "uuid": "8b011915-8fbe-40eb-8744-f8e144281b19", "comment": "Malware payload (Mirai)", "value": "ea1dd1fa407579d2d3a25741aa37f858", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679947, "uuid": "2887c975-726f-47ca-928b-fee1680339ce", "comment": "Malware payload (Mirai)", "value": "3140e01501232216536ee63ba57782aa3f198fbe4d21db3bb7c68401e9159075", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679947, "uuid": "301d80c5-78a8-40a2-b62d-f20fa933b5c1", "value": "T13AD44B59A8419B95D1C02BBBFF1DA34873132B38E3EFB1069D195B246B9BC1B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679947, "uuid": "28736bf3-7e76-4e15-a457-56280bcb32fe", "value": "12288:QOS3tbcpVVgP1kad6kxZxLHCZBchEcKvRws4bghvhdyikRytdaatBxSc/k0EUZgt:QBY+d6kFLHCRIs4gyGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769679947, "uuid": "038b0f9f-d423-4aca-aaff-4c69f4c51535", "value": 599852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679947, "uuid": "0c59a134-c239-4b59-82af-48bb6c2f0833", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5708a6d-f942-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680523, "uuid": "a749807d-cbcd-4d43-aeff-f84404ee7f85", "comment": "Malware payload (Mirai)", "value": "e121644d9cc72d69583ba2b31652cb4f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680523, "uuid": "d6d2a6e3-e01b-4710-b112-b35df110b21b", "comment": "Malware payload (Mirai)", "value": "8c23d135354d3da949f8b25a8b0a7817dcacf226c09b70291616fb24455e5dbb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680523, "uuid": "53f016c1-8bfd-444b-a19d-eb54aecb45bc", "value": "T1CE031942322C0E5BD5A66AB0293F17E083BFE9A120F4F585165F9B468635F3611C6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680523, "uuid": "e760baf3-71db-49eb-89e7-a89c6a804e2d", "value": "768:DMJvzLo0dMeAPxzONvJg1J/qgubsdxNkRiA6v4FaUGY9oWnur8Ub97OA9M2aC:DkvzLo0dMeAPgxJg1J/q9SihDmnyA97F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680523, "uuid": "68675c3f-afe7-4e7b-a23e-b46ef8ff2a60", "value": 40044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680523, "uuid": "fc9ac365-f001-407c-9766-8d7c0714c317", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1773c17-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680523, "uuid": "e89d5fa6-290f-474d-a3fd-821f6a986ad8", "comment": "Malware payload (Mirai)", "value": "33caedd64d9ae212055d4191e036ab6c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680523, "uuid": "09673ac5-47b9-43b9-9516-4e1174f35c0d", "comment": "Malware payload (Mirai)", "value": "ac2e39763e956b3b9b263028ede6b6050a6448dffd1ce10a37c3d059805c028e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680523, "uuid": "74693d9c-5df6-4611-ad4d-6ab1c523939a", "value": "T1FBB33B46EB808B03C4D5177ABAEF41453323E75493EB73069918AFB43F867AE0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680523, "uuid": "b6ca5671-70a2-437a-8d5f-36a15eb3959c", "value": "3072:3wDWCKDlIYUEbB0n5UqIhGmyt6M/9zjKy:ADWCKDlTUEbB05U+myUM/9Cy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680523, "uuid": "3e31db2d-f6be-4dd4-af45-ad933fc93483", "value": 113062, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680523, "uuid": "aefd77cd-004b-43a5-b1ef-919eabac8056", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1993abd-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680524, "uuid": "0e3947a8-bad9-44aa-9259-ffd73f2412a9", "comment": "Malware payload (Mirai)", "value": "916c244a4dd96b4a5f780b098a7f3fc4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680524, "uuid": "94d655b3-4cb7-46c6-92b5-11802dd1e8bd", "comment": "Malware payload (Mirai)", "value": "a3b6c60976920a1be0b2837dfc40b9c7eb0567ba74cd973f785fe42034e0a08c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680524, "uuid": "f8470362-ce4b-42f0-af64-634c5d334549", "value": "T10C33E996B8818A11C5D413BAFE2E118D3313677CE3DFB2129E106F2477C692B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680524, "uuid": "5fc46205-be7d-4900-84c4-b82a373ea978", "value": "1536:Adnkymmz4oXfFG6QerfJCLLKI/ig2n8QW+:gFzhXdGErs2n8QW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680524, "uuid": "0df458ca-096c-4968-a024-57472c855f62", "value": 54400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680524, "uuid": "8c634a26-7878-4a7c-8dd0-68f6fbdd52d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e07d26e-f942-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680525, "uuid": "a39065ea-b49d-45ae-86ba-eac2f6674a94", "comment": "Malware payload (Mirai)", "value": "07d2ee003261516bf90ea021f076a2db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680525, "uuid": "c9a33b96-0856-4656-9392-ca43554a3848", "comment": "Malware payload (Mirai)", "value": "790a61bb44af3268513d487b78f9d0ba94421e1494a3c666aee51e29d4c9a6d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680525, "uuid": "a8a109ce-4048-4087-9beb-617de2f72931", "value": "T103131A17B94184FCC099C234577AB53ED92B71BD0239B3EA37D4FB26AAC9E611E1D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680525, "uuid": "32f2671e-b3db-4064-908c-48a5e09f4589", "value": "768:F1u2eCac5mcXmviroq2gNcTVXtzPzBc57aJI7Kwk:62Fac5mcXproqPuTJt71c57t+w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680525, "uuid": "ade38a14-643c-41e7-b6a1-874dcc204418", "value": 41984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680525, "uuid": "c4e41d5e-caea-48de-b10f-3c439c89038f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e2cfb50-f942-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680525, "uuid": "2676ffb0-f73e-433b-b4b2-8dbd2dd99013", "comment": "Malware payload (Mirai)", "value": "c37c2c55a4862db1ec5d6497eac08d35", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680525, "uuid": "426d37ef-ebf6-4e4b-b37b-009884b8b060", "comment": "Malware payload (Mirai)", "value": "228aa6e7f26a0f4a0ae8ee9cd8d02247dbb14a8838b15bfe763483a677743fe4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680525, "uuid": "2caf4d68-b9c4-4842-8e30-3a8257b76506", "value": "T187438219BF610FB7ECAFDD3709A9270524CD641B21A97B39BD34D818F24B21B19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680525, "uuid": "9fde1c7d-e834-47ec-9e3c-5bbd8abb3cd5", "value": "768:8BrbIwwl8tGgfgxQqNBDveqe5535eGee7es8vQtYXiDcooeIGpW:8BrbIws848DKuDzn7H8vqfoVP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680525, "uuid": "2b862326-47de-4109-9a1b-0195819c2632", "value": 56916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680525, "uuid": "5d6807f2-4ee6-4b68-bcd6-6a80fa3a0bf2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e40ff34-f942-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680526, "uuid": "c30c6c33-86fb-48d5-a312-b51a5eafb73d", "comment": "Malware payload (Mirai)", "value": "f9e16319d904e7535cd24d851debf8c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680526, "uuid": "b404f1ce-edf7-49dc-9922-d9dff5f1bbfc", "comment": "Malware payload (Mirai)", "value": "7fbee4f480ad6c5ddef4be4775b335a04ce3fff1361c9266116a15f8d5b21320", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680526, "uuid": "909c3895-49d6-4336-93f2-506d53191242", "value": "T10A037EB6C83DAE94D1598634AC24DA781F63E209D3572EFA1B4546A1D083DFCFA193", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680526, "uuid": "d3649ebc-6229-4e68-9bae-e1ef5949045b", "value": "768:9ar/UwtkW7Hzglrje6tBCifNGL0rHCno3jONCE:9azUwtdY/toqH/TONCE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680526, "uuid": "4cc2b6a0-98e2-4c4f-8327-59668d4cbb19", "value": 37696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680526, "uuid": "4951d84a-b087-4d2d-8005-b262dca93b62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80c6ce45-f942-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680529, "uuid": "37d05eb5-e342-4e0c-a5e6-a1e566bdf9e7", "comment": "Malware payload (Mirai)", "value": "fde64eda626304df53bed78387b13e72", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680529, "uuid": "cad8a3ad-55c2-4269-96a9-24ab781ddafa", "comment": "Malware payload (Mirai)", "value": "2d2499257868d29dd7260d3f2413a8f7714aa0b0750515691b819afab4439c08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680529, "uuid": "c1eba312-b868-46f0-8634-dc8aa4416e0d", "value": "T1D213F8DAB401AD7CF85FEABE84374908F671774550430B2757ABFDE36C721A48922E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680529, "uuid": "117d6225-e51a-43d7-ad3e-980aa9be1333", "value": "768:jbeF0S1EZ8Hit8/Pc+o7ZLnR7qjRJUy6w9V8lPw8bU:3vSOaHiec+o7ZLnBqPUy6wT8lI8o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680529, "uuid": "0091c919-3500-4d93-8093-eb91c8dc41dd", "value": 42516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680529, "uuid": "be3d042e-273c-465b-aced-5489d5c27ef7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f204f0f-f942-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680529, "uuid": "6449401b-e8b7-43a1-ae61-dcc62e17c1ec", "comment": "Malware payload (Mirai)", "value": "d92fa63c27547527a4270d642526fccb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680529, "uuid": "f298b20d-b9f7-495e-9e3e-a0294c2e92bb", "comment": "Malware payload (Mirai)", "value": "724f8976b254fb2c92dc4338533f68e4dc5cdb0a3ea7fe9790961a3ab8dbc767", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680529, "uuid": "77053045-d31a-4ce4-9499-15c98e69446e", "value": "T11C43A84E3E219FBCFB9D873447B38E219248339626E1C645E15CEA025E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680529, "uuid": "ec993530-17b9-493e-bf68-02aa01d68465", "value": "768:HRRxffpdoWliL/84WD84fMGI97xJXnFOF6C//BkrQ/aySKJAW/DQ5wmnorguz1Ie:jxJdoWliLoSn97nc/xyrvgFRho4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680529, "uuid": "7ca536f9-cbb6-4cfe-ae85-1498758abddc", "value": 55172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680529, "uuid": "7ea61f0f-b888-4f25-ae1f-61240fedc11f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a80c3ca8-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680534, "uuid": "6d4b6ed1-1632-4182-8bde-95b92746df95", "comment": "Malware payload (Mirai)", "value": "8488f142d28ea252be36b1e52cf18f2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680534, "uuid": "7f909481-d89f-4304-bb46-58b62ce2415c", "comment": "Malware payload (Mirai)", "value": "5049d80851d0764e8cc1d098ca3406e4cc8460fa1c3939afb67752e91517d900", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680534, "uuid": "d3d8ea63-43d8-4223-b3e1-bbf353601712", "value": "T1DFF2F796B8829A26C6E4237AFAAE428D336173E8D1DF3217CD115F047BC551F0DA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680534, "uuid": "81b13324-5007-474c-9d32-0262fa812e0a", "value": "768:zy2HaTcf8gnqAaqaJWDGH4sioV7E6QKmt0eCS9/xLtOb7jPN:zf6w0gqnDWIWKmNZRO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680534, "uuid": "43858c1e-9d64-4129-a641-a8a97ad5989b", "value": 35676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680534, "uuid": "28a31712-ac86-4a3f-a004-720dd7fec20c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80e69780-f942-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680536, "uuid": "44cd62b9-742a-4817-a39e-6aabe9ea626e", "comment": "Malware payload (Mirai)", "value": "5de839ec62d52e1515c2f50cf1f31319", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680536, "uuid": "0446a71c-1d3e-4a26-a378-2bed2540cfb2", "comment": "Malware payload (Mirai)", "value": "dc8a52302e3a2ccc59b76607102aabe4583bd870b08bf415497ab0e0ae596dca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680536, "uuid": "61c1a265-2a2c-4baf-9662-180bf54a6363", "value": "T183134B21B9392E17C4D4A8BA62F34768B2F5524E25E8CB5E3D730E4EFF10A8095136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680536, "uuid": "c3b187bc-61ae-4f7d-ab7a-009cc0e733a1", "value": "768:eUorv5B8Zq9jZwciZR1+95oPkM3rhOO+XnKnMO:eUw5BmSjKciZRY9mnh87O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680536, "uuid": "be7481c6-5d19-4025-b8c6-549057e5fb87", "value": 45404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680536, "uuid": "f37c8c7d-b21d-4ab8-9e91-c8be32ab7412", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8eae8a0-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680536, "uuid": "f10c63a5-ab2b-4e90-918b-9a0e9eae3671", "comment": "Malware payload (Mirai)", "value": "d0d41d6f6dff6f589f899302d0684f6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680536, "uuid": "adf715d5-9999-45ff-b8e5-dc6131ed4ee1", "comment": "Malware payload (Mirai)", "value": "d4a2cac2ac2a79f75163f3188633fae7ec907dd002303c68ba9e9c64cf4e2427", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680536, "uuid": "e7389cc8-8620-4565-bc1d-7b7e1ef94903", "value": "T1C5132B91B8819A13CAD4137BFA6E418D332563A8E1DF33179D226F553BC692F0DBB2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680536, "uuid": "48144047-4156-4044-b073-19c9de0caeb4", "value": "768:xUKpYnQkIlzee9vlMqofyetmeQKjOwdUR4hl2uUC7O2JPN+kAJGbw:5pV3l6GKjv+X8EA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680536, "uuid": "38ed68eb-e514-4309-a4f1-677b453ca098", "value": 43260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680536, "uuid": "2b4c6db4-cb6d-4584-9485-88ba0142d817", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80f8f663-f942-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769680641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "2209aeec-9256-40f3-b30e-12c144fe560d", "comment": "Malware payload (Mirai)", "value": "47270ae66816e9439443bf394f39a2f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "d359e298-4c38-435b-be2d-7e77975c7841", "comment": "Malware payload (Mirai)", "value": "dd47db237dc7e58b3ece73627a6665d5252f4ec15c88f28da322db106758d76b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680641, "uuid": "f4fc3052-8229-4fac-a60f-14313b59e059", "value": "T1F6035CC4AA43DDF4FC1602B42177E7329F7BF13A6028DD97C39995239883A06E6472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680641, "uuid": "ea5fc964-a4f6-4036-899b-fcfe645d25e6", "value": "768:tD8ULRB2loC8yaXtSNQGGUzXHT7ZW4n2FnGvEspV:tY272lP8yaXtSCGGUz3nDn2FGvEs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769680641, "uuid": "51e32c6b-80bc-4688-a426-c3e0146b276d", "value": 37980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680641, "uuid": "5e3afdb8-6df0-4066-a382-bab55e97e582", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7887e6f7-fcfa-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769681314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769681314, "uuid": "2548573f-6a7b-4c4e-9e7d-2ba06f88954e", "comment": "Malware payload (Mirai)", "value": "aa421f2903ccb9e8b537ceff8d7428c5", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769681314, "uuid": "6d4f2a01-4ec0-4d58-8190-25193b6623f8", "comment": "Malware payload (Mirai)", "value": "9fcd2fb970effd695c7056d7375bcde8508549916ee2d60bfbb775b3178a9978", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769681314, "uuid": "1902b994-5952-4819-84a3-4dd733198350", "value": "T19943F26EF8B58A0ECCED797F78445317468161C062CB37F493022DCA66BEA07D52E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769681314, "uuid": "ccf643c3-cf5f-4817-8b0f-4b6257e179d6", "value": "1536:KR1Y7KbPhi7el+tvg2g75Jj446cHj01cWWqM:KR125tvT4p4ta0lWqM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769681314, "uuid": "a0a878b7-c8e3-4d74-a593-eadb33c25489", "value": 56044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769681314, "uuid": "0cc87840-b9fd-4492-9bfe-4c659b6d76a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "093127d0-fcfc-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769681986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769681986, "uuid": "ec5147f0-261d-4e07-9d96-4860836d1b78", "comment": "Malware payload (Mirai)", "value": "94b65ff10a1aa60de6b30512933541eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769681986, "uuid": "cfd6d2ed-7c56-467f-be9a-243ab2125dd7", "comment": "Malware payload (Mirai)", "value": "f782bb03e6f02f16ac28fa996bc39cbbc0f3ca03b7fc9d744b3393775fe92115", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769681986, "uuid": "64bfda04-2acb-4ed1-b92b-90220f4d290a", "value": "T1F933F171C11D90B4C5A418B17E195366F78B2FA8F7897270EB28D6E8D4EA6021CFC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769681986, "uuid": "a047ce98-6937-4b0e-84b5-a5775fd68496", "value": "768:EKEAWMo23b4j4rhVrpmQMza+mtoObSfPJZblm/lk7Sj9tfuRxs3UozR:8AWj2sjwhVdmQ+aVumSfhZblmdk7DOzR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769681986, "uuid": "2ef0f143-abff-4df5-a5e7-51c133836dd2", "value": 50520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769681986, "uuid": "fb57784e-0e6a-434e-bf56-39c808fdb6e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cacaed06-fcfc-11f0-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769682311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682311, "uuid": "baafff38-49de-4f03-bd96-45046d78ae91", "comment": "Malware payload (CoinMiner)", "value": "9ea3adc68cfcc779193d075035361151", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682311, "uuid": "62c85e09-d935-4cca-8d20-c18173f40ff5", "comment": "Malware payload (CoinMiner)", "value": "87dbdf5b7a09ff4052220d7b187c3feb605bda3d8a534111ede4b0994584baf7", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682311, "uuid": "0dde9185-2039-4d54-bfec-d5abda48261f", "value": "T1ACD53387AEBC549FC3F988BB6DA2D4710EBDA593D92D0AF35429700C73B579143A21", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682311, "uuid": "f82865e9-564f-4445-9182-af3fb4a8bbda", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682311, "uuid": "842fb2e0-37fd-4d4c-b41a-73dc3a67400e", "value": "49152:7xn7UL3/0mTnCbtZUFTtQq9/fbhrrWlhZJC/gs5fS8of/q7EGW8ABvWMmkqogym:7xnnmStZoTt9+hq/L5aPf/qc82+MmzP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769682311, "uuid": "deb4bb82-9616-4adc-8295-292c9e76abce", "value": 2964480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682311, "uuid": "f4d7108a-3e54-4b89-8be0-0858c027b534", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f254dc6-fcfd-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769682425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682425, "uuid": "ca992910-598e-451f-a156-7f81824edaaf", "comment": "Malware payload (Mirai)", "value": "7478652f35f779ac3a3f0e98f005fd62", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682425, "uuid": "4036b7b9-4a7b-432f-80d5-830ee27707a6", "comment": "Malware payload (Mirai)", "value": "80ee20cbbb9ae55730cbc841c0581642f9245b27627ae2a61f6827803d304b8e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682425, "uuid": "5eba0d99-b907-47fb-9517-2733acbee168", "value": "T133D44B59A8419B95D1C02BBFFF1E934873131B78E2EFB006DD196B246A9BC1B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682425, "uuid": "32a4602c-fbb4-4105-85f3-e7667bfb10dd", "value": "12288:+fItAyQa4poVNsd67e/l6HCJ4oEEEK+Rj+1ffCM4Rw3A5ZH8aTgII9/bFxF7Wsjw:SZJd67O6HCHG+1KwT+K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769682425, "uuid": "c0a8b4eb-ff98-406c-929b-886286fb4276", "value": 606200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682425, "uuid": "d67c3f19-88a7-4c7a-bcdc-a08a469f5f7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40d79295-fcfd-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769682509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682509, "uuid": "d1f7d224-21fa-4e14-9ce7-be5e27035b8d", "comment": "Malware payload (Mirai)", "value": "655476a18c41744f0fb6065b339c0dad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682509, "uuid": "f7c851cc-ac3a-4d4a-9fda-cb583da82777", "comment": "Malware payload (Mirai)", "value": "5ebdff2c8e8f34bd81dcc1ba4592a34c8c0291de8841169ab337b9c14c9b3229", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682509, "uuid": "91b51a72-2d0f-43ae-baa0-3b1c48a9ce62", "value": "T10623E1A1CD29EC99EFE71F709CBD6EE17FC22E4936F44ED1255053001943226AE096", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682509, "uuid": "5c7121e5-7f75-4c6e-a2d5-cf9e18686635", "value": "768:OofwQYDu9VG+/pgGOvzNeZoCHxfGioAbwQjCEZ96zaMVSsOzaGfGl/Du1jIjYtV9:O6tVG+/cvzNyxf9Lw1lJifGBaBML0p4g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769682509, "uuid": "ab6f20b4-2233-4bb1-afda-ef69fd28ced4", "value": 49008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682509, "uuid": "24cad736-b9ca-4d63-9a5b-a8e563baa771", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6484309-fcfe-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769683189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683189, "uuid": "278939bb-58b0-446c-9fc4-9fcfeabc7fd2", "comment": "Malware payload (Mirai)", "value": "b2b9ed02629ad19766565a39b21438e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683189, "uuid": "bcfbbf5d-3d80-40d0-b136-6e169e993411", "comment": "Malware payload (Mirai)", "value": "a558be3a0df83912d5dd1141e0ce04c4bc6a3ab6c2c1b80b302fab0316ddd811", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683189, "uuid": "fdf9e6bf-ea83-4b34-805c-ce47d387db12", "value": "T121B35932DC256EA8C664C4B4B1B4CF792B13A59186474FBE1563C3B59483C8DF90AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683189, "uuid": "778bf3c1-cb22-41fb-9111-23c09dd70b99", "value": "1536:4atuxTGZ8MTrWsWPYbqjfKCitMpkXdOrAWxdwjKp1V4xSQWXQ:4dxETrWspbqjC5MpkXscWHwGpVXQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769683189, "uuid": "7402d0b7-e3fd-43c4-b4c7-464dd0669621", "value": 117508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683189, "uuid": "477c2ccc-9970-4685-9537-c7e7caf8faae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c157959-fcff-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769683333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683333, "uuid": "2fbc112c-bce6-4e3a-985f-e3cdfec642a4", "comment": "Malware payload (Mirai)", "value": "9b0a74e1661d04a67f5f84c5ec1923f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683333, "uuid": "08746f0d-07e6-4618-9059-2282bac38458", "comment": "Malware payload (Mirai)", "value": "2c2db6925f94551c2b45ee13fe510779e2cca5c95a3f48c348cc44fb6b4cbcca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683333, "uuid": "bbf74db5-3f27-4cff-bb1a-7a5b263bc08a", "value": "T12433F18EA71148F7C23878BB8FF607502C215D55E757F9106A76E3650C6E80C38EB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683333, "uuid": "b5997201-5a02-4272-8ea6-d2edd5aa7b02", "value": "1536:LQjmTIMtGVj5+Wf4MD6wCrSh186vP2OvuVJuY:EjiLg5+WXD6wCGhxvDvuVQY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769683333, "uuid": "ec24b2cc-7625-48b3-b17f-0e62b25aae69", "value": 54096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683333, "uuid": "7dd10567-f94c-4970-8bfe-a08e0e9feae7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54f37bdd-fcff-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769683402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683402, "uuid": "f73abc6b-c545-4c43-a4ea-4e449f4f807d", "comment": "Malware payload", "value": "49a3d732a8da14115ae2391553981abe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683402, "uuid": "d7b8e26b-b914-48c8-ae8f-3bdff05e919f", "comment": "Malware payload", "value": "157e50161f3412e71941b149ebd5895415c7c1cd00e37145d476f509cf71a0f4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683402, "uuid": "70a60097-2921-471d-b1d2-1a05fcda4968", "value": "T16234E07E7CF9ABA5667C073E1C99B12002B4D2994FC4BD108EE41EA719022D53E2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683402, "uuid": "3a331476-61bc-4606-92bc-1803f7a52465", "value": "6144:HCLpnmJqotLnEnpTnfek55N6UWR9NoaSFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFQ:EM9LnEnpTnWLUWDsrM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769683402, "uuid": "249aa5f6-eb24-4fe1-8f67-a3dfb2845491", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683402, "uuid": "4e7b75b4-15b6-4b04-9aa1-b1ad09037eec", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daed1b7e-fcff-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769683626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683626, "uuid": "fce88f35-de15-48af-9d76-4f629acf7872", "comment": "Malware payload", "value": "c0de9cad0f5c50f502849e2487bc7166", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683626, "uuid": "55a24747-7433-46e9-8d53-d5063d51cf82", "comment": "Malware payload", "value": "12c0932fb00cc896831871232bc58104a76f65c9e2ba4c16f58b142893281169", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683626, "uuid": "84d10dba-27a9-4689-bd1d-03d3ea1e3ce5", "value": "T18AF4B63EFA56C4A8C2DFC1F8A787CEA56831BC140130715E42C566937F66C205BAEB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683626, "uuid": "6ee9fd2d-e179-478e-8e28-886e513162d2", "value": "5af9f2dfe140a90a6638d2d1893cb19d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683626, "uuid": "b08d047f-b61e-4a61-90f6-d73fd84856c6", "value": "6144:BzokktG3CSqWGJGR1n9obbcZZ/anwkBtGZHB3AQM8JHoL52pA5nwTMO5/rp3Xs2T:VokOGSSqWGcR1nOM/mnSqQM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769683626, "uuid": "ef9543d8-665a-454f-9272-3ee13f281ee6", "value": 775168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683626, "uuid": "c01aa341-502d-496c-8019-04d006ed1578", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fd467b9-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769683796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683796, "uuid": "506445f2-b892-4514-a494-9c1812eb143b", "comment": "Malware payload (Mirai)", "value": "55e3dbc5f3969497ddaa04ec3af9bae8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683796, "uuid": "379c53e9-7a2a-48ff-8fbf-5caad09ebbf3", "comment": "Malware payload (Mirai)", "value": "a4f75bf922b35e3bdf8c9bd3841db40b493e8ccbb3e1d3591fd482b28145702f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683796, "uuid": "12cbd374-4ebe-4d1a-ac59-cd2a5d1dee8b", "value": "T1F1F2F15E29F51E25EBCBB23701105CF420282C14973B4AC57B19AF792F7E8B9A05DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683796, "uuid": "bcaba76b-93b4-427d-b8d5-858ecce8d7e7", "value": "768:mmuKrUuE5np8E+e1C8qtmEpiuC5D5TJG/SyLyml5Ec6yDEyT:mmuKrrmnp8EN1DHEGEl5EM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769683796, "uuid": "7e65b419-9d5f-42a2-867a-285eaa9f5fcb", "value": 35636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683796, "uuid": "d27253ff-d66f-4884-9cec-2c9f65913b80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0d99e26-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769684066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684066, "uuid": "18ba8f28-bd70-486c-ac0d-8d7703a7d2b8", "comment": "Malware payload", "value": "b5379be3add9e4e592fc2b468409f971", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684066, "uuid": "25be2d1c-1aa8-4ae5-8a8a-83dece658a2c", "comment": "Malware payload", "value": "36fb5603937b2bfcc788632f69bdcf07872841ff57fd097e7e7243e092040b89", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684066, "uuid": "68ab74a5-8203-424a-a008-17d330d8f3a5", "value": "T13C2512D2CA455D8CE11D5FB5C072ACB409A7BED93C25EE88CC987C636A334D32925D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684066, "uuid": "7a28d2e2-6ccc-48a9-8f79-a9da5f6a0034", "value": "f8ed6cc541fe430b436c08e1ca7b1f2c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684066, "uuid": "a0b136d4-1927-478b-abfc-dc3f97598723", "value": "24576:aZgNuIGaL3tVIFoh5QL1g5ikLAoll8aZzb1:aZgNz73t1hCOQo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769684066, "uuid": "efb21012-6ab5-417b-8c49-92408bce98d3", "value": 964096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684066, "uuid": "7b70177c-6b8d-41bb-8bc0-07f695853323", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f732072d-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769684103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684103, "uuid": "48321c7d-e036-4e23-a512-ea8a04aa2c15", "comment": "Malware payload (Mirai)", "value": "526e9b0f9747db80ab895244ad99dcdd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684103, "uuid": "a70a460b-7455-4214-8d24-9f90054ee79e", "comment": "Malware payload (Mirai)", "value": "d16177f483bec8cb7f85f47291fc29d3d8670dd836049ef19d4bdc202d7ef5c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684103, "uuid": "68c392d9-63c9-416c-a392-05ff4c9688cc", "value": "T1CEE32ACBF800DDFEF80AE33648174806B130B7E255924A373257796FED7A1994827E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684103, "uuid": "d5cd52d8-67e9-4d31-b2ef-1ce76f65df1b", "value": "3072:oiJQfFWLT8Gr7Hta8BQbMiVYjbiTL8dWPAmpZcOsDDyQ8AV:ZJQgt7H4jbMkL8ojbwyQVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769684103, "uuid": "35e35326-de23-44a6-93d3-cb406fadb611", "value": 150560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684103, "uuid": "1bdd0b96-87f5-478f-a7a7-47d69d872a3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1577c355-fd01-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769684154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684154, "uuid": "aedf8b58-4dbe-431a-9126-4869cd11d973", "comment": "Malware payload", "value": "c43e8b606ddcfebb340cbe9be1b6a2d5", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684154, "uuid": "b1817109-1211-403a-9cb2-3a49a9d99d59", "comment": "Malware payload", "value": "67cb8f50716e96f95c1b84f08f42f6df58abe2a96d5077fed252a1c717a29332", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684154, "uuid": "45afc50e-9729-46c6-93f6-dd00e824d8ac", "value": "T112312E9EF4397595F08E0C7B2747ED07D4084469193C637DBD3D9CA75A0C8E19F451", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684154, "uuid": "dd4c9627-5756-4e69-be9d-b54b8ca612bb", "value": "24:98VSMvFXbcN8nW47KLOYDEgcGxWZ9J0Gc8Ib+ZBZdaqBJ2NCuncOVVhkHnJ8aQ3B:988MVbG7guxu9J0b8I4arCucWkHn0B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769684154, "uuid": "f525d760-be76-4b62-a8b3-d92bfb76f63a", "value": 1593, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684154, "uuid": "e232fa61-d933-4fe9-a982-bdb6b9c45abb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c24fa30-fd02-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769684783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684783, "uuid": "95263d86-5b52-487a-b406-146c08200c26", "comment": "Malware payload", "value": "529d8aa25bc8dc5db153e4eeb199c224", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684783, "uuid": "2c074746-e9af-4243-8625-083ec8c0ee3f", "comment": "Malware payload", "value": "a8a9540d6845834965909c01dc9c988620fe91a282ffc60d13615c411d8e83d3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684783, "uuid": "6cc3bcb9-16e1-45d1-9bad-6f0a02ad5459", "value": "T136D633968468AA71F707E17A72A31BAF1D15AEE471D0FC67F60F463393122792F482", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684783, "uuid": "1c34cf69-72ae-44eb-b05e-4cde999a9a3f", "value": "b76363e9cb88bf9390860da8e50999d2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684783, "uuid": "4420206b-0e97-4a9a-9443-dc589ce40450", "value": "393216:gc1uU4g8lpItw1zqi9ycvyQDzX174UpxEEr2:kLpIGFqi9LvJDzllDEEy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769684783, "uuid": "8f78ba0b-55c6-4172-99ee-88ac2c372bec", "value": 12735352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684783, "uuid": "5fd55041-54ae-4e81-a2ec-6f3f9a2de0b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f76b0a74-fd09-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769687969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769687969, "uuid": "46b891ca-1a8f-4f5d-9271-1425b9ffb492", "comment": "Malware payload", "value": "454f088f3567992e0925b808b02d1c45", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769687969, "uuid": "3e6be78c-1696-40ca-b9e7-37e984c55d09", "comment": "Malware payload", "value": "ff9810e1d2eca88010a1f8ec0cef6040540ce6e586e8c24c9b8423f5375e0765", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769687969, "uuid": "f1809ad7-fd93-46d4-be04-681d744bfac0", "value": "T136A5F16EF1026CB3D967B3BF50935286D726E0A121EC5D9774C259280B0E6783F3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769687969, "uuid": "9a7bf646-b359-4183-9917-4c0d3b2b9141", "value": "49152:/V2MlV8WUryKIb77pmPDSxLOqcD63KHnBguiG3v:8j0dmPW8HmaliG3v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769687969, "uuid": "de594449-7efd-4f22-aabb-62dc414a91a0", "value": 2139112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769687969, "uuid": "d49fcea2-237d-4974-be05-76c2f88945f4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "556257d4-fd0a-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769688127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769688127, "uuid": "388664bd-c34f-47ab-85fd-1efa33eea6ee", "comment": "Malware payload", "value": "86b951f50d85ebcc05ba1f2228e04713", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769688127, "uuid": "f28687c0-c6c4-4ae0-8449-ba4244f1507c", "comment": "Malware payload", "value": "346503a894b49df9b6b99c933af2d8398ed3e7a5537f626d2d584372360e1e55", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769688127, "uuid": "e23413cd-63ae-496f-82a8-86dc06547b26", "value": "T1B2E3F96F83F7313572138359F5A66738966DC133EB410EE2F9B29A9C8FC11A201762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769688127, "uuid": "418f4b39-1844-42fa-9c63-e88cc0d262fa", "value": "768:tZdapEbrcXlGRNjcXscJGcz74k/tHcTwAQmpppsfifRf+VIrePfHKIYeoFSnUh+h:lapArIl4k2wBmprUIrUF4BThYTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769688127, "uuid": "cd842b7c-8e94-4fd0-a873-06a728eea038", "value": 151244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769688127, "uuid": "e7e0b4ce-4933-41ad-81c1-5a2d6fd04152", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb0655bf-fd0c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769689299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689299, "uuid": "3bbb1e01-400e-428a-bb8c-a13e7322426b", "comment": "Malware payload", "value": "2672ee8e8d788dc301a2370ea76942a5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689299, "uuid": "42a08506-952a-4462-9ff1-2cc9a786f9fc", "comment": "Malware payload", "value": "8a3a32ce37bb5e2b4e5abd4b90997a564bace4c416d2f4bda4b3a9d32d961860", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689299, "uuid": "3353a4ae-3e9d-4bd0-a6fa-68f221ec99d6", "value": "T18331E790CB85B20FE8C759701B7D5A34A98050F69FE178CA19CE02717BDC2C191FB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689299, "uuid": "fa449504-d63f-4bf7-83c4-c37dbe746119", "value": "24:9mQtVj/IySFu9MF+siB2qS8JgqJZD78e7vXyVYNpSXvo6gqS+70qkRPt:9moVj/B8NDiB2qS87ZD78eWYwAHq0t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769689299, "uuid": "326856b5-21ca-45ee-80b1-14c0674bc76d", "value": 1583, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689299, "uuid": "8131531a-a651-4736-b325-260b54b042ef", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a0c07b2-fd0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769689396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689396, "uuid": "e34f2982-6ba7-4168-bb5b-ef60bc1df81f", "comment": "Malware payload", "value": "976014da0d43a97d6bf9a43a0eb5792f", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689396, "uuid": "dc136b46-9c77-4d3f-bcae-4eb2c63000d8", "comment": "Malware payload", "value": "5c4d7a59122ba712e6d41db0f45998f91ae956bb1e653fb27d064e8af06eb69c", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689396, "uuid": "65dd1c3e-ead1-41a3-81ff-3c407ee1e59b", "value": "T1E931EA18D1047C01F3729BB06B836051FDC3C45B04A1B9B9E8373D125E620394EA16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689396, "uuid": "b5f06fbe-c07c-41c2-b784-d443d3305757", "value": "48:98D9TDRrjbZdRYoFGBs9YAScyfVehOjRI61tIi:6D9R/+oFGBryGRI6HIi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769689396, "uuid": "35d204da-d8d6-4f5c-b896-884014350c5e", "value": 1593, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689396, "uuid": "0366ed41-85da-45c3-9b68-b33e60424465", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc85c4c1-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1769689854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689854, "uuid": "240263ed-90bf-4da2-834e-5dcc2f0ccc17", "comment": "Malware payload (CoinMiner)", "value": "9f3069e77d062da63b7ba5c1f35e9937", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689854, "uuid": "39018d8f-0e26-4631-9a8e-55377f44277a", "comment": "Malware payload (CoinMiner)", "value": "ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822e", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689854, "uuid": "e0e15574-af4d-42d8-8f94-1fc0697e820c", "value": "BD563345F4809837F139153625F884B2B07DBC7297244BDBA39E2AA56E317D83339A4E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689854, "uuid": "d9c02109-1fc0-40ce-97e8-6d9e863a1128", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689854, "uuid": "c2571b98-28fb-478a-93ec-6f84033ff5b8", "value": "98304:RLJSThOfTCiFBXmfFs+JhEpCVoR8oMEOJ6Ty3RvX+UGD823FUuzmH:LBfTCiUs0VSLOJgyBGUA8Ch8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769689854, "uuid": "08b7a4df-d974-4b1f-9c86-c2eb07bbe3a7", "value": 6227160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "789f046e-fd0e-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769689904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689904, "uuid": "cb050b9f-35c6-4c8a-8237-adeddf9c9f0b", "comment": "Malware payload", "value": "aa01263112217be30f4ae9f03cd8f336", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689904, "uuid": "9aeec7f1-4a6b-447e-8ae9-ebb2b25a1832", "comment": "Malware payload", "value": "374986ef0be887cf2259859788281f74e412af8d1206f32b44271ef7606fbb5c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689904, "uuid": "fc29f407-f714-4ab8-b1dc-e3cd86ab0d0f", "value": "T1E48309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689904, "uuid": "033a7e71-bc62-4575-be95-86c522a71088", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnWWa9VN/:XEKltp9txAX/yr2pbWWQVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769689904, "uuid": "497f06d8-ab3d-411d-a4b9-3706e5bbc7a4", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769689904, "uuid": "44eff151-f226-45cb-bd1b-880f7e5415d1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d220984f-fd0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769690377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769690377, "uuid": "77d20d6e-d282-468c-a5e2-21b59cba5ad1", "comment": "Malware payload", "value": "65fafcbbf71c47b3fd5f5ed442764c9c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769690377, "uuid": "81ceb356-28ac-4020-8670-cb0f3ae6fecd", "comment": "Malware payload", "value": "6ed33fcd7b91bcff9d64923bca20bbef573fdcafce49d38c8bc39e3d7b9a5577", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769690377, "uuid": "40181ac1-42db-44ce-958d-ecb138d2d27d", "value": "T11131E891CC59A31AFE83B47AF0C56784A852490ABA90DBF1DA871212DF60408B32F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769690377, "uuid": "5cf7ec66-dabf-4515-935f-58d43a9d8d1a", "value": "48:9+P0gUwtXa4f4IpKe7PLGZ8XkVI6PVAoR:4PVUf4bKxXIavR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769690377, "uuid": "a26788d3-354c-4ab2-b851-4dcbdd756962", "value": 1602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769690377, "uuid": "fbe2bdf3-3601-4512-b933-a6a187aefaf1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36075446-fd0e-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769690484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769690484, "uuid": "a81b58bc-19d5-4ec6-9b92-47122787c288", "comment": "Malware payload", "value": "02fdaff404db2d8803d536c8743418a0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769690484, "uuid": "000b93fb-f23e-4ed4-8c33-c14c08d0162d", "comment": "Malware payload", "value": "0031f007158586395977ec1383da039d61ca1d9833c7b1e63ca630b14ed10f2e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769690484, "uuid": "d8fbfe5f-7693-436d-8a28-79b8073a2348", "value": "T1AF31B53BB1550125CACBB339A5AA97613E0D82402BB0A447AFA471FC8D8B33227310", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769690484, "uuid": "ec29197e-7d83-44b3-bf4f-c8a8c6ec0298", "value": "24:9gyh8ylw069rBjyIcLaL+dBh1rp/WmF3spB3VgNPUkuFS2ydJst:9hlS0uVVxYBTrp/FPVURSJst", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769690484, "uuid": "9fb82933-2db8-47a9-a618-25253d1148c5", "value": 1568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769690484, "uuid": "cc2c5d4b-e5c8-4290-9654-aaf193a0c14b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80d4443c-fd12-11f0-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769691636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769691636, "uuid": "dab00b77-b067-4b05-8cf8-3d239dfe1356", "comment": "Malware payload (CoinMiner)", "value": "4c8f8c5f47b6e65be210ad6754500b5a", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769691636, "uuid": "7fd0b877-955f-4c57-a716-1ad439c4bcca", "comment": "Malware payload (CoinMiner)", "value": "f7271f783c49dbe7d42e2a22df2bdaec0523ac7d7ef3273fa0288c71a440b48f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769691636, "uuid": "efebf8e3-ec25-47c6-bc7a-c16065098608", "value": "T1E0F5335B509254FCFE079872436ABF75905672B24B22B2E3DA63253D0E31FD60E25B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769691636, "uuid": "d820732e-7b05-4062-9450-16e9b7090c2e", "value": "3641b918fa6fcd6b6754b75fd2065c00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769691636, "uuid": "7c3fcf22-3a86-4f50-866c-301d2e98a6a1", "value": "49152:0wqiVRgT+NCja7GyYDY6J65so6xKq2IZDIrzc97Ole6b:0AVfhwcsMjVjb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769691636, "uuid": "eecd5734-eb6b-4285-b615-b4c28761206a", "value": 3443512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769691636, "uuid": "2bbcd220-a64d-40ef-86da-cfb5fcb845ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5098063-fd12-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769691804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769691804, "uuid": "2d8898ee-ed4a-4b8f-a168-09cbe090e562", "comment": "Malware payload", "value": "67064e3b982993a5c663cbfa694ff5bc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769691804, "uuid": "01ceb63e-f6ba-4d26-8a3d-fe60c807629e", "comment": "Malware payload", "value": "8603f5c8a5e16f65bcabddcb6638643a3be0fbb43073b0b37f9c82f83302d629", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769691804, "uuid": "148a0fa5-4022-497a-84b8-446365c12621", "value": "T15BE3E96F83F7313572138359F5A6673896ADC133EB410EE2F9B29A9C8FC11A201761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769691804, "uuid": "f47ddb1f-e476-42e5-bb24-32a23257b30d", "value": "768:EZdapEbrTXlGRNjcXscJGcz74k/tHcTwAtmppNsfifRfiVIrePfHKIY5oFSnUh+/:EapArrl4k2w2mpvoIrPA4Y2hJgc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769691804, "uuid": "2de216fa-092b-459f-8def-52c30997f727", "value": 151358, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769691804, "uuid": "62a8d66c-9be7-4657-9fb4-909ecf72acd8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58f55b24-fd16-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769693287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693287, "uuid": "30153262-fca0-48dd-b3f0-dc0098004881", "comment": "Malware payload (Mirai)", "value": "d47cd3e643a048b624e8633c14055cc7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693287, "uuid": "38a647bd-50ba-40c6-87aa-1b9e77006c55", "comment": "Malware payload (Mirai)", "value": "7812e6e5f2ba6da58f321cc2507e99a60643eb429027359ca0ba40ac02c94434", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769693287, "uuid": "071fd2fa-2d67-456f-bcef-4d0dca837aaf", "value": "T1B051DBC59548CD382C73EA53E6B7412C30A1A5522CF1FBA9E9C4BAE8428EF143D44B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769693287, "uuid": "e959ead8-928d-461b-a3f6-a261fecfefee", "value": "48:vk7f7N7hkq6GkgyzPkaKWk4oUk747o7UkfJ3bkv9RkMcgkrpVkySOke+CkZfTkBU:vk7f7N7hkq6GkgyzPkaKWk4oUk747o7o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769693287, "uuid": "e8ec5271-ed07-456a-9f8b-64966c9b0e8c", "value": 2910, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769693287, "uuid": "ec74c107-c13e-43af-8f11-c9a8cf7e4af7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8074091a-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769698936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698936, "uuid": "3c4129b9-b53c-45c9-bc05-fc652380fd08", "comment": "Malware payload (Mirai)", "value": "cf2271031f3e0b5209eb642a663d33c7", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698936, "uuid": "7048dbbc-b1e0-4faf-9089-e7bacd427959", "comment": "Malware payload (Mirai)", "value": "4e67e7b836f6fc525a6297df15d6c66c6a0cbcca881ba5f0eba202b1dd1b0f01", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698936, "uuid": "c7c5f634-d67d-4284-81e4-fab180cf59fa", "value": "T175B3AED7F74B1590C8624AF007C34BAD2E1762118F67C4E7BC0E293D5A391DE4A1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698936, "uuid": "0310ed5a-1f32-49b0-bdbc-a8c3d9633e98", "value": "1536:aQNjWuAN+MOCnyjI3FCtsKfCIG1S6Bgl6/LWFT:5NRAN+MBycVcsBIG1S6BgUqx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769698936, "uuid": "f65851e9-ef7c-45bd-a1e8-894bb89e5199", "value": 107876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698936, "uuid": "26545b8b-ca20-4f67-9639-c2c95d4dbd7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2c5959a-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769698994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698994, "uuid": "7e1b5980-d5bc-4d23-98c0-373ab17c8889", "comment": "Malware payload (Mirai)", "value": "b4e7068f4da6fb50a0ccfe1bf2e7b276", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698994, "uuid": "dfacc27f-eb32-4d5f-9a4d-f31cb3dacb43", "comment": "Malware payload (Mirai)", "value": "2efa8a366e8ed1bbbc78de02f64bc068a18a22388aa81bfdabb390725d78d204", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698994, "uuid": "05aef6fa-3fad-4a93-8918-e730f3aa3963", "value": "T145C2D1FDD69E2C8BDBBC5CB3A08D2A605E15D0E47BC9C70C53904C497A25BAF64CE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698994, "uuid": "089168ec-e82f-404d-88ad-f2dd53627a68", "value": "768:mfRMYLEZgkb744DvVWtOQLobC5rc0IBPgDrW4:8RvYZg6740WF8CwI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769698994, "uuid": "0a9ad9be-da3d-4a4b-9983-e6923b92a95e", "value": 27552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698994, "uuid": "6064a7f3-94da-483c-b3aa-b25e077d3899", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3c0f17f-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769699049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699049, "uuid": "4ecd7d5a-aee4-44b8-a23a-c6f981b7f8f7", "comment": "Malware payload (Mirai)", "value": "7faf304e819a3b62d3bb513296e96b5b", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699049, "uuid": "b5b226fc-810f-49a9-82cb-17c66e47b7e7", "comment": "Malware payload (Mirai)", "value": "a2813a9fe5413680e700374c839e2db4c442c868768194e0afa6f4e7a8d8c760", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699049, "uuid": "c3d03096-91b0-49ae-b90d-989f84f4a80e", "value": "T138263951F9CB44F6E9071E3144AFA27F63305D098B24EB97EA507F29F97B69219322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699049, "uuid": "715bf253-5df3-40d1-9df3-119733915a32", "value": "49152:fs0d19pNKTPdlDB517d1EKS1z0Gjl/CEHMdrBG2SiLSLhm65K:nd1jNKTPzFecnp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769699049, "uuid": "fd72e1b1-18bc-4561-b648-6c974cd87dd7", "value": 4792472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699049, "uuid": "10807523-a8b4-4120-96d1-827f7c0044de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd2cac9d-fd24-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769699468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699468, "uuid": "4c8ca107-a086-45dc-93df-e22eec3cebde", "comment": "Malware payload", "value": "f2034e675f42d6afe08dd4238044ce70", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699468, "uuid": "f0f71d95-8d12-414a-b405-6c8e8ada6676", "comment": "Malware payload", "value": "cf9d1a8422d1afdfb643cfdc4a284ffeeebeded5981aaf35a367476341efde65", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699468, "uuid": "b85be97e-f0c3-4726-ba25-c7a36bbd8798", "value": "T1085612F1BEB09A5593045227A35D3BC2CEE74208B682517D72686BDC9B2754F600E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699468, "uuid": "5a860d90-bbf5-493c-a225-65697acab304", "value": "192:xqDRirig3C9MC3v31Y2xCRjiiL0W7Bo35QNpu7eG5lvOK4GN40QgK1CD0jg1GYDP:mjr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769699468, "uuid": "73e15845-bbb5-47bf-8793-46cec4ec2e8f", "value": 5910135, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699468, "uuid": "1952932a-2664-4c4e-8d5c-a7dc01a4ffb2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ff38f07-fd29-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769701459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769701459, "uuid": "6618ead9-bcb3-41ef-85a2-7330993dc40e", "comment": "Malware payload", "value": "68294112a5245e9d79c840cacafae013", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769701459, "uuid": "8c4d7b84-0ac6-4175-9590-e3c2e5f089b7", "comment": "Malware payload", "value": "b861dfd57d0040f7833729da4cba269f41020f7b6b3a8f010305847640fd76a6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769701459, "uuid": "daca12c4-5a18-4549-8f6c-5394aa952d8d", "value": "T1D593E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769701459, "uuid": "ef11f153-ab3d-4796-8c63-8eb9bfea535d", "value": "1536:pap92uEEwH8Qw0DMqpYJKNoE+pTYeGf8BqLv3TliCoRGpNuqYPPX6IH8LutVWw:I6uEEwH8h0v+pHBqv3TliCoRGpNuqYPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769701459, "uuid": "6766e927-687e-49cb-a385-f3baab23ced6", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769701459, "uuid": "e53c2c6a-2e2b-402e-8827-df94b6ffe29a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f21ee691-fd2f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704281, "uuid": "5601c421-3dba-4bfe-961d-f593bd40f3a9", "comment": "Malware payload (Mirai)", "value": "f8114cef626e0e17ed77b3b4c612db6e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704281, "uuid": "fc4a6b8c-681c-47ea-822e-c475255174c4", "comment": "Malware payload (Mirai)", "value": "50de2de4e0d17e5815c7a27c097b4cda9f136e7dd639fe8c054c5ef5761b0f50", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704281, "uuid": "f277cdd3-b00c-4b3d-ad0f-77ba49ac4123", "value": "T10341C4C81B921835ED56BA7A33B9080032F97A939CEB5A5053FAF8F5449DF0828717", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704281, "uuid": "4658e7a8-7ff5-447d-bdff-cb42cbedc74e", "value": "12:JCkp0FrglwumCX0FrGIlGyT71X0FrBNilBVwWeBo0FrCl13zYaX0Fr1LlzQO0FrJ:ItXumCsRGXtJSO/QL5xuMkscjCAshn4g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704281, "uuid": "38050c19-c97d-42c9-b11f-43cac4be7357", "value": 1904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704281, "uuid": "db550d79-add9-41bc-9588-79dcda522ee6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e94bbb5e-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "7fa53be5-95bd-4dc2-a94c-fce98825b727", "comment": "Malware payload (Mirai)", "value": "ba46a84aef2fadd5858a0d4d61cc7096", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "60067216-8de6-4f5c-ae39-a5e5da8116fc", "comment": "Malware payload (Mirai)", "value": "0bf2bf2fcd1c94b38ef3f68ca021e73b1311b2a7b6c83b160377643189c66577", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "263cd2a6-a4ea-4184-8f7b-ddcae3d13ed1", "value": "T161B2E0A9026D65AFC08E077142FD97535171DDC43B8F839B7F888B6EA40AD20EA256", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "6e6512c9-6cdc-4667-9059-899a8afc211c", "value": "384:MJVs70CkFsFVxQqERlKbHwmxWDmEvkvCFEZvxDLuQAclncrPoMT8eNLv1Rb:asWsFAqYKrzJET2ZvxD15ZcrAEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "73b3d66f-3114-444a-b228-cf6d4f06c7d6", "value": 25164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "d53be6f0-7e7e-499e-a0a3-6d285478cabc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e95101af-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "6982f847-4fd7-40d6-bd9c-5f670d0a3ad3", "comment": "Malware payload", "value": "af395bcb9382975a70a904000adfa607", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "cfe78b24-2fb5-461c-b735-19720268979f", "comment": "Malware payload", "value": "c8aa6c553351d412e620c3921013fa88662f5e05be5ed09391f4c1c1a53d7bed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "2715cab1-7f29-48c0-b11c-bcd8da8ae5f6", "value": "T14E333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE66AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "3156c361-a75b-4e7c-8a23-761db185d2b5", "value": "768:lw5A3X1eCZWUJ2SNpRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98qN+s:lwkt3NpOzwLMU431ANA0BLBCer", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "392f9df8-c8c3-4556-a824-2474619d591c", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "cd623179-daff-43df-81fa-0a93166e5de4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e952be2d-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "6c985560-0d1c-4d47-be74-5cdedde0d626", "comment": "Malware payload", "value": "4ff9670dd5217638049df84755ceb856", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "ce82d42e-6349-4bc4-9f2b-059567f57c69", "comment": "Malware payload", "value": "b37244ac0b144b38fcd1436a02e4fc200c63ef92bb6be35dc00de641629c5c78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "6f46197b-69a0-4e75-adf0-4c327e2a8ec5", "value": "T185D308C7F900D9FAFC0AE7374853080AB230B7A549925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "6e39b1d9-fab4-4c68-badc-83166beaf157", "value": "3072:OXbul4MGHJvkrybLutTK/OwpiZdDoOPVO6V1jbiALNHFIVx:rrybytG/Oyi42VOgLNax", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "4d728214-d179-45e2-b96f-cca62e4e4b04", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "00d15c95-ba32-4b48-884f-4797742a7772", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9539e97-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "ff6691fd-087c-46fb-adc0-ddda193d66c8", "comment": "Malware payload", "value": "c4a07a21aeb7c96fbb290231588a8627", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "0a36001e-422f-47c1-847e-e2601afb82c0", "comment": "Malware payload", "value": "ca81960eef221ec9773cdecb56c60998fd89381884b5242538e716ec5f8422bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "e82eec32-813f-4acb-8ef0-14f504d573ba", "value": "T1B7C30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "54c45fa5-2ea5-43f3-9381-a83120e5d394", "value": "3072:fWD7YhjFMX+maR8TcDeRqQV3tNQYciYTG1t:fWD76aX9aKTcRQVnoiYq1t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "bc5f0ac1-9e4a-4d43-b343-6c9fa860d3cb", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "410fcfd1-83f0-4377-8fa9-3fdd7c4362d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e953e492-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "5a0873b5-dfd6-464f-a6c6-8dd4f6e7d756", "comment": "Malware payload (Mirai)", "value": "17d2577010e4f0671a9bf1414dbacd27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "a8c9aa19-9875-4fed-9be3-ee13a15afc87", "comment": "Malware payload (Mirai)", "value": "f8e931aa163b33cf60c64cc49c670002cbd0261e156df60dd251b77443c4e49f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "973549d8-ef0e-4e33-a97a-bac24437e8c3", "value": "T10523F173C92799A3DC207DF0EC98C77151A25F6AA0B5F6B339CE47183AA691406F94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "c29871d4-882c-4615-ba4b-91f1e1efb19b", "value": "768:10WIEREyxCD9DvDNXQtFawDeok9q3UELzod58P2x+l0:yWjR6Dd7NaiQLzod54QK0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "aa95bd5f-ae4c-4526-b48e-e8ce6087fb6c", "value": 49196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "77de50be-753a-4f06-bf1e-4b61b9384a1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e95536f1-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "04f23eff-fa52-4f32-81e4-0f2234f53eb1", "comment": "Malware payload", "value": "c1ce737b1d16da5b387f65f7d91855ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "0c834fd8-434c-4b17-8fb5-3bc39d0541dd", "comment": "Malware payload", "value": "f43bde96f95443a3f2af30fc5efaf5d6ec7f3bcc61d189fee6da1457d62d55a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "bd867fed-fe88-4b2f-8d41-a91fe56e6fc7", "value": "T1E4B30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "eaf6cba0-54a4-4736-8305-61bb36baf05b", "value": "1536:57jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxO:1zPqF41OUBljSIxecUtCg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "5b988846-9cfe-43c8-a3c1-a868ef14f32e", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "977b9992-bb0d-4a01-8959-d090d549e2b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e95694d8-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "2fe12cc9-1600-4610-a424-6e1850bcc561", "comment": "Malware payload (Mirai)", "value": "ff18fc260d0ef1c71886c708f582c653", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "179cb91f-7cb2-48e9-a868-4d007bc9da9a", "comment": "Malware payload (Mirai)", "value": "155660a82a609f27a7ed1a437c4bb13a7c05b2aae8523aedb402038f54d78842", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "34dde55d-5288-4d8d-9224-8874b2eb1a16", "value": "T126C2F1744E37A56EDC96B8317765E722E1FBF40C75A8B64220A0D04335DBC38486FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "8a786cb5-615d-45e7-a226-e3da7d1cf2a5", "value": "768:OiJluey4da6kBPPMSLMcfVixWfp77ssA7:1J8ey3zNbrisBxQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "b0d30396-9a7f-4d59-a3e4-22614bf5262f", "value": 25804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "736a54d5-4852-4d06-a62a-d8d205d3ab50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e957e9db-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "ce99a9fc-fdfe-44ac-b154-3d301040be66", "comment": "Malware payload", "value": "fe45e8d7f7afeae48e9edd2fbdae52c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "5402af0d-f841-42b1-8c08-7765d84f9b68", "comment": "Malware payload", "value": "f7d18c9a789c65d5be7001a24fc85bcb08ea9e50a6edd99bf93acb0243b5cc2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "fdd9f3ef-2c98-4b97-8b88-7c693624aad1", "value": "T1E323F1238569BCF1D028A5BB805DD94490AD759053990FBA80F9B5FAECF3EC03E209", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "1fd66cd8-1f35-4693-a370-e210d5e213e5", "value": "768:IInEVflzTpXUiyd0voPa/tawgkPqTbj7gx57UDQoZkO3ZG88wA45:Js/JlRvoPa/tP2jgz7aqsc8fv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "2c315e62-ac29-46a2-afe3-49c088193b2e", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "b0a48e41-6944-4b9f-b6b4-7af204ad9b92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e95b7484-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "c0de52a2-561b-4995-9d57-6b8879068b49", "comment": "Malware payload", "value": "63fe6bd28c1ff69faeb8656926a19ec8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "8a037803-9276-416d-82a6-591be640fe31", "comment": "Malware payload", "value": "a0bd37ac0f19124b4aef184e55be1c7e38ab7b607c8bb2b134ed7a942c4b283d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "12c00e07-e22e-4045-9a57-7ea8c221eac3", "value": "T19F930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "c2136d62-cc98-4711-85a2-f9e6363da337", "value": "1536:wqnZK8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1YSn:C8NUv5nTacgzafVAwe4BNRIbT2gXt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "be692824-0b35-40fd-91ee-8393508e8bec", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "fb2e8a2a-c21d-4e5d-b025-a11d40053155", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e976bf8d-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "93d8fbf8-62ef-4d5e-a089-efdf75f839ac", "comment": "Malware payload", "value": "9fbc775104e774073b599f12ba46b70e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "828e5db8-6030-4e92-a87b-c0b2595f2644", "comment": "Malware payload", "value": "2745f0ee553aa16064179362d20650ca143fdd8560888778c4b5bc65b33f9e30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "a51443e9-2bfe-4f4b-b6be-ea750b402604", "value": "T1DDC39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "b088edae-730d-47b9-83e7-6f4d5c5f641d", "value": "3072:gf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU41qe:gf0tJBR4NSALD7rnCrheiuqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704696, "uuid": "0953e5c5-8744-42b8-b366-e0a7f1907d98", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704696, "uuid": "1457e050-9d30-4f36-93d1-c2d86ce82790", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb0cf6f4-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "9c12b92c-1fa7-428c-9291-dd990de52afe", "comment": "Malware payload", "value": "1f78aa5d43d64609da0ffae599a2c9ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "2cd3bc72-72dc-4818-8e09-6d0e78eb253e", "comment": "Malware payload", "value": "d4c471bb5cc7749991c9844a2bdd2f711ae4456c9ec70a6a31e1a6e9d5da35a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "86b0d7f7-297b-413f-b7e3-d42ea0b9b41f", "value": "T1F832C517A7BBAE1BC4D037770193072162E95F916024472FBD0D1C8E6E9A3412D3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "f8c1cb86-b3a5-4ee7-b753-509a533f7bb5", "value": "192:xvrOR1CQOsz1NxfAz+OH9iG0GhWaDpU/O7Q89AGSybiqeif:xvrbCzfap2GwIU/kwGSdUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "b6bd4102-2309-40bf-bd8b-0fbea8f9f268", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "75fb9c32-6b20-41de-a1eb-22af894080f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb10b5df-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "867cff9d-afa1-4b4c-8ac5-221ade0bd11a", "comment": "Malware payload (Mirai)", "value": "6fe0e92f8c4e8e4d713e91410766242c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "212d602b-eecc-4725-865e-7067b2c640d8", "comment": "Malware payload (Mirai)", "value": "b35eb9d8f069a97af95b6c981d717b212c8d186ee776e10f4017bc76c1fcfd07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "3733c055-53b9-476f-bdb9-e930a23b2ada", "value": "T139B2D0203179A670E37058317C71C98277A74DB92EAD3722BA68C7F8B0D691E30F06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "26771cd6-7ce6-4de4-8e27-02b20cd99096", "value": "768:dGj3t/wQy40t4eclTXZ2K8F/8yus3Uozu:dGzt/wQkMTp2KC8ezu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "371194bd-40c8-4e6a-a52f-c322f2ec8832", "value": 24744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "7d15fce8-ed09-4d0f-a76a-5669b8950a4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb151480-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "e209ed96-820d-4cf8-ac6c-fe037ea01ef7", "comment": "Malware payload (Mirai)", "value": "f1f79a518c9dae36e42a04007f1971e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "101afbc4-b14d-4c2c-9b63-4a7137a27ade", "comment": "Malware payload (Mirai)", "value": "e813f8ce124553a5b790408444a01982cfa11eef856ea026964cd174dffcedfd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "cdca3fbc-af7e-4544-8e53-d4dc61d79cf5", "value": "T1B3C2D07C521390EDC44DC0FA9FD807112AE04F84DA83ED6724C5E9C39969A9E7AA39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "f54eb3ef-0141-4784-9cbb-66dbde969ee8", "value": "384:4EYRAoRVMCPsHEuhlyllkvGXZHM6QakJODF/1jfx94oSKGSwUJgGlzDpH7uNj1JX:nYRbVVP7HzF1x94pUJgGlzDpbuR1JGI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "e0e78438-35f9-47c2-b554-65592a447024", "value": 26748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "391e0d28-3244-473f-ae3f-a9c20365f964", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb18c221-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "5a169ab9-386f-4312-9170-c04ae6581a00", "comment": "Malware payload (Mirai)", "value": "2d315823b0b383bdb6b443c2e7a811c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "cf43f275-c380-445f-8eca-22cc87ed7364", "comment": "Malware payload (Mirai)", "value": "d611bb2db37c040c6545022a5cccb7f297dfc09a4cd1b3488e4829e461b39255", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "2c6ffea4-15b2-4fe6-a8f6-9b83a50affb0", "value": "T1CAB2F1B055DC872AFE5001FBA35E0DDF9C659410612CFE08E78A9C7E2D670596D4CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "ee93810f-776a-4f38-9792-be563100e4ce", "value": "384:M+WC62LmPBhVHnggfspLJ3CHysEt0kW6e+e29oMW+81qX83Abbd919v1Rh:t762LwBWLJSHysEt0kW6pL9oM5QqM3OJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "129912f7-709b-49a5-9e8e-1602818d1b3f", "value": 24176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "c0de88ab-6b69-4ea1-b936-3b16ac135c61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb2242b1-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "6b406620-0a5b-4914-a8b6-416fd233e41e", "comment": "Malware payload (Mirai)", "value": "bcba0b57d8a24333f3a3f752d96227a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "d6a38f86-2ad6-4c00-9b0a-c1f512d4c5bd", "comment": "Malware payload (Mirai)", "value": "ae044e462adacc347e3eaad56759b73b5a472852af7f63a47a202014f5273a5d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "37fbb62a-e1a8-4303-9c56-9b81ee33ea5e", "value": "T16A239E23DC3A4C98D11C08B4B5699F356713F10AC6932DF7660A8AA5E417F9CFA5A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "20a28908-c7eb-4515-8ab7-3c0b1a9893b7", "value": "768:Qu6efjfzavxNe+c6f+FaDxAubu9S68VC6b+oUuDSXCf+:Qu3zavxNeJdeAF8V1UlXCf+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "4811bb1d-7b81-45a2-852b-a845f878f236", "value": 47876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "ac37ad26-31d5-4cf9-a0f5-19cb06d10be6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb22df2e-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "1a5788ce-fcda-4d88-b6e8-b102c40db98b", "comment": "Malware payload (Mirai)", "value": "fd40f81ce634a1edf89aac4195890003", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "7f206a35-ffdf-47fb-a5a6-c813a02e8a12", "comment": "Malware payload (Mirai)", "value": "2610845b62b021dfb145c08a0277c8d062119b10d324f193383ec5cbe9f65e38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "84c8e396-9a64-4375-bcb6-842df9ac729b", "value": "T17ED2E02DA58FF6B5C9B01032E558C49B3A553F3980AC3C2DB3A503783ADB48964BC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "855a267b-ecbd-496f-ac99-281632c9aa5f", "value": "768:VrZnHpkXjvYIjy4XPSXTXgu2LA99oe7RSHA9q3UELE7:Vlaw2WQuQA99BNSpLu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "9e615b94-c505-4b30-90bd-45fc44f7194b", "value": 29892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "5b61c2bb-ffd1-4178-b9f3-0ee1b26a39ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb241930-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "007f6cc3-abd2-43c7-ae05-3361fe044995", "comment": "Malware payload", "value": "83223072a229434c955f3131ff2325c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "dacc1e38-6727-4bbc-9431-ef1dc2843a3a", "comment": "Malware payload", "value": "ef3acaa9f6394dbd124a1e8d587ebdb72f0b09f5da63759383e3f7ccf4d5b1ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "1247044d-0334-4b70-b6db-963cce22af6a", "value": "T129E3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "d512fe78-9cb6-42f8-adf5-9fd930d5d1c8", "value": "1536:p+fTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxgdbK:pYlybKpzEOfGQ+vEubTt4ouftL4UdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "cae417af-04a1-4958-972d-60cc4b5c91fe", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "c1c747b3-efb5-4ad0-b907-12c2a98f1cd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb29a9fb-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "299aa1d8-6135-4866-924c-67fddd0365dd", "comment": "Malware payload", "value": "2605eef4c12c7d6d158d26a40ba5a6e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "109b5d1c-b44e-43de-9a3e-1b29353d169c", "comment": "Malware payload", "value": "0705956d1a7d22017b5f374134ff92b8588123cbe27c61b9e049a2bd35550001", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "90af71bf-dbf2-4d00-a4e1-626707555a45", "value": "T14AB30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "6415039e-dedd-45d3-a9e9-f96ee9fe5d83", "value": "1536:TUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45Zv9:AixnUHz4Z+5ypkn3E89", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "be72d9f3-234e-4391-868c-bc27ca199502", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "9456d5e2-0df1-42a3-8f74-ce35cf63d143", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb2b44b0-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "de84521d-dc66-4c43-ab56-1064434569e7", "comment": "Malware payload", "value": "1b26749c23321a1986cccb834d043bd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "832312cd-bf17-4cd9-a48c-5a932107955b", "comment": "Malware payload", "value": "0a6aa7884f514849332241b15ca3c51ceb42e655a32b925c6ec64092eaaf20cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "93fc70ae-dd07-460f-bf7c-84eeddf0945c", "value": "T1E5C32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "cef44367-a0de-43a2-9313-e1b843e318ca", "value": "1536:68B72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dwJ:6eB4exMF7oZKJnCNYamJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "ae1f3000-ce72-4677-8e8c-a8408073551c", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "d8672aa0-e9a9-4da7-973d-254209ce484c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb2c6323-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "e49b516d-d7bc-488f-a1c9-f43a464929c8", "comment": "Malware payload (Mirai)", "value": "5ae80247369608ce4167ff29f945ca14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "1ccaab2f-e507-41cf-bded-11312bfa623e", "comment": "Malware payload (Mirai)", "value": "a8a20441ac0749d1b569c4e9e419b38fcaf21fd6263e4b3617b9bdf2bc103c04", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "f21df30f-a5e9-4c9e-b796-5d8a16eb6657", "value": "T16692D0729365BC70C3614832D27CC7873A66287884EE3B27E7481965BB9BC075EF14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "5d8ecc96-cda4-47b6-866d-509cb7432817", "value": "384:ZoMonikH/nmKDTxN7rjkm266MLm511BzDo+x2KUZ2n/EMuQ9KhymdGUop5h7tC:enBHfzD1NLk+6MajzDoc2H4//uts3Uoe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "9b527fe4-a7d1-4061-9ff7-d3750e801bc5", "value": 21216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "990fe40d-a497-4755-a7a0-58ad0ceae429", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb2c9f1a-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "41bb57ea-2917-4c72-8ece-40a003d8875a", "comment": "Malware payload (Mirai)", "value": "990a1cf6e4952fe1383823a2984fe84e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "f8575f08-66d6-4417-8907-4ac7dd928691", "comment": "Malware payload (Mirai)", "value": "5f918f9409de0d5e84de2d0b47848113d6023e71e9ff2d03ac805db5f053f4fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "bf4105d4-c17c-445a-ae6d-91cd4aa96682", "value": "T12E3319D6B5019DBCF95BEBBA8413460AF531B7561083063763BBFC53AC362A48E23D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "27e68cd3-2454-4892-a4ba-cd5d3ece02fa", "value": "1536:BoG7IMHSWSgciVCnXEgc8eh1gBUxCWQ1vtd:4DgcisnXxGu5W+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "46dae0d8-7529-4d54-97dc-16c472c2b449", "value": 53024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "c9a75ce9-9419-4529-9f98-26a79947e6db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb2e5bac-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "8f24c83f-457d-44c6-b112-12fbbf5c2266", "comment": "Malware payload", "value": "7244c448bfd75b241fbb4354f56fac4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "7115d678-3dd6-4b1d-8152-7f3d822df255", "comment": "Malware payload", "value": "8cf9dfac47679c5c4bd67c100fcbdeb14e8783bf8ef3fae52dbd64a187e67a9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "afe5feec-6993-4af3-a0f0-75d35f513272", "value": "T129A328A3CC766F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "05123e32-9894-4021-95af-82b9b5b9d4f7", "value": "1536:71ufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAC:wbU2RC4kPCtSzWu3/3L1C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "e2dc353f-3ca9-4e52-bb46-8d65c998d3ec", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "0f3cade8-2da3-4d59-b13a-61ea6ee2b8d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb306966-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "6122a065-dc8a-4e0e-9970-ee2f1a172d38", "comment": "Malware payload (Mirai)", "value": "c73e5cc12312efee5fd111d7d163125c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "414fab52-dd39-4dae-aa8f-91ad639ff0f9", "comment": "Malware payload (Mirai)", "value": "3058633e4f8a7daac2de436d971f959013e6903655c93ab3aa224d749957f2f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "afdd4d12-bd63-48f5-97ca-46b7bcb5d6fe", "value": "T135B2F1A7E18D2BC6DF7DEBB2216193A537F18B9E33A9844954C29D101D0BA37D002E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "f8decc90-902d-4920-baad-cb35bd18acc3", "value": "384:MG7ORHfCjNAPH+Z6TV5STrhHKyyCb5NK4wdFY2XMzNY9sfsFOVpmvxxIBVSh8sgf:3+/C+PH86TvYFKDCb57mXMzGWU8TmnIt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "f4c464af-46a9-47c6-8f49-cc60b6876aa5", "value": 24408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "0ed53e2c-64b7-42a6-9590-bf8cda03cba2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb31404f-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "1c92ca72-6fb9-4c68-87ed-850739f5d81c", "comment": "Malware payload", "value": "8945eccbef7688f02f07661484acc1d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "9c3bab4b-f298-4dfd-8b49-a44ab25f64d1", "comment": "Malware payload", "value": "b149da965dbf8b6569de53bd3c05764ca55eade11630ada7aa492ffd8dc11bf2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "8f5d8b9b-16e4-4f81-9cbe-69a1915e554a", "value": "T1DCF33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "185417be-0a1d-4364-a425-9d37093daee3", "value": "1536:3dMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMpBEn5p5M/LW:/7vDtrnPTR71gmX7Dy7fMpBxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "9579bf7d-25d9-4770-a885-37dcba88cc12", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "392e7248-11ce-41d7-8f30-356223a58955", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb3b8cca-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "920bfbf6-d330-4ae2-8d84-c188a98ac868", "comment": "Malware payload", "value": "397b8c2e10877d946eda739c664547aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "895a90b8-ef32-43ba-ac46-c0f331ab50a9", "comment": "Malware payload", "value": "b9f855b8e459e5f585609d26e0c4053a07cb65b4ba14dc6d2617b86598359218", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "f33256d4-459d-4171-a607-3fb0eada0b3a", "value": "T119E3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "d097070c-65aa-4d13-9fbd-cb987c12192d", "value": "3072:axjJw1Cc/0s6YAPwenUr48pzfR+Jon8y:axlw1xAop0YfR8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "22b5de61-6547-4bf2-b2bb-13a3d3ba594c", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "e5d2b937-8843-4494-b4de-15cbd74f9da8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb3d2259-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769704699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "5aa1fe28-4571-4320-b9b6-d07732bbe794", "comment": "Malware payload (Mirai)", "value": "5d8eb167b65a8c308d57437ba238c93c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "03207e65-01da-42e5-b679-92dc89d2398d", "comment": "Malware payload (Mirai)", "value": "e096d860ca936399d461d16fdd57e05fdd83ac35f6b16d246f79e34f93fcb9c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "622ad940-b7b0-49a6-94d8-df8254e8b1b7", "value": "T1A3334B11FA391A27C0E4B47A12F7832AB1F6479F90A8C74E7D320E8EFF1499059975", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "a0994a45-bd7b-4cb5-b3a1-2d8c17d8cc19", "value": "768:yoKR+dWhoDDkFm7nMGWU3NAIZotohCJvM+AEMO+VziNxz:yFvhmkFFG33NAIZotUXVWz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704699, "uuid": "ebe7a9a7-87ce-4948-b67c-85f649e84e01", "value": 54184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704699, "uuid": "d662755c-6233-4391-ae47-c1d7447d6ad0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d4d7224-fd31-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769704756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704756, "uuid": "64a112dd-21b5-4da7-a781-21d143de0dc3", "comment": "Malware payload", "value": "a83ee62337e4218437d35daa84961324", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704756, "uuid": "8011b5f8-80d9-448c-9507-1869f0ccbcc1", "comment": "Malware payload", "value": "3d60b99dcb9736484ff7e6d2bf831f05e36ff94819ccf8d5bd16d1d2e24d3ffc", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704756, "uuid": "41420b45-3efd-488b-b193-676df0193e28", "value": "T16231EECEA1B8D249C598EE00B0F54DCA7336B69075B5463AFCC11EE780C9E543C1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704756, "uuid": "02991da4-66f1-4bf2-b213-6ec403d16733", "value": "24:TKYicDdBzKtcr1CTlWZPZBM/hfjuj1bCj2j2wa9D6fFIho7jJ0gKJicJbz94BESd:6u1OhNo7Sc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769704756, "uuid": "10fb7a1b-18d3-4184-97ee-e3cef377629b", "value": 1845, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769704756, "uuid": "e5363544-f737-4c55-b64f-1506a9aeef5e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f84ce5cf-fd0c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769705927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769705927, "uuid": "c3919cca-5c57-4eb3-b04c-4e9900cd981a", "comment": "Malware payload", "value": "3d0ae5992fdceb386e9f2a156df50c37", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769705927, "uuid": "2c46b913-c0c6-4e19-abc2-39cdfc1d66a8", "comment": "Malware payload", "value": "63108a0545c8d785bf64f25d365a191eb1bcddcf066d7165ca3295482c12b4a6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769705927, "uuid": "ab880541-aace-4c1d-8beb-88312822cdfa", "value": "T11B310ACBA01E9851DB540B32F59E4C2D94ACC1A891A138B350ED04159B93296D772D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769705927, "uuid": "3570e7ce-d4da-4f2b-9bee-6130fbcca5a7", "value": "48:9Sbz3XbpmoDP3hgstyfx31VEJwhXnvSPQOs7R3aE9g:MXF3q+Ex31VEJwhqQOsN9g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769705927, "uuid": "74a06aa2-e5ae-4155-bea2-e70ac20a5ff3", "value": 1604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769705927, "uuid": "f53ff719-064d-4657-9c88-59e058b90f7d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "690d6553-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769706199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "99658e9b-0f58-458e-a00a-b08a653fe2a7", "comment": "Malware payload (Mirai)", "value": "e400305ff66319a6ee379851cebcd04d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "77339560-c4af-4315-9b30-66b1900176fb", "comment": "Malware payload (Mirai)", "value": "dd9b9e32c8b90a44846aaed04973ae1eab7719c32edf97c2e151407b0ee139b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769706199, "uuid": "2fb114fc-9232-4a36-8e75-0a3688577f46", "value": "T126531A87F890CD66C9D4573AAA6E11AC336293F8D3C93302CD1C46255ECA99D1F39F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769706199, "uuid": "d5c50971-68f3-4fd1-a19b-375786e7b7cb", "value": "1536:L0UtUvebPQJfpjPrxM8i+/4OWp4DkHHIhFVhF/:ttiebolzw+gOWp4D+HSFLF/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769706199, "uuid": "c611f592-9e2b-4f54-896c-9e297d648ed2", "value": 63496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769706199, "uuid": "47382e3e-31d4-45f0-a051-4339a933cd72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "692962be-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769706199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "52a4049c-61e8-46e7-b22c-6d94ddfc1144", "comment": "Malware payload (Mirai)", "value": "8ca287ac0b9c18391ea307b0a491bad0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "41e26975-0be6-4625-a3af-b3fc0ee7c18d", "comment": "Malware payload (Mirai)", "value": "30774f169b21fc10a53bd8d8d3b1e92c3c64748cb5249491b1a075399f00339c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769706199, "uuid": "14676cc1-ff51-4e00-b189-f154f4ab9913", "value": "T1A9F46C42FB1C4523D9430EF1597F43D5F725BA4341F8922A370E9B573222E3A9A877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769706199, "uuid": "3d7d45ee-8a59-4b0e-a965-e699b0564374", "value": "12288:/GfmUpyYLxJFEbk3210jhIL4COz2p8eW8ipROyg8+pcTvfAvUeiRPOMI:2pxPEbk32EhI4Xyp9Wfg8+pcMiROv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769706199, "uuid": "f2a093f7-7d58-4e25-b925-11cf7c353b15", "value": 783964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769706199, "uuid": "4c461b6a-0f98-41fa-9a18-ed1659bab5d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "370e7b66-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769707488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707488, "uuid": "e115ebfc-cd20-404a-8851-a39787ade28e", "comment": "Malware payload (Mirai)", "value": "a3c6259477aedd5679013d19f0e3d140", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707488, "uuid": "2e37bef5-34be-4828-8e17-8dc3cbf49ada", "comment": "Malware payload (Mirai)", "value": "1203b21d4510c0ef5f481452cc0a59b8ed83257561b6acf8a81df23047ea0403", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707488, "uuid": "6da31d5a-6ef0-4fe3-81ef-fe0474d3154a", "value": "T121518FF829B1AE3B4545DF46E0B14FB9A40FB9C894D00F68979F78ACBD6C40578306", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707488, "uuid": "13f601c1-7a19-40b4-a3fc-58a9110976ec", "value": "48:rMpzaC56q6IwQgOh18W5uWebCwqgojUHx1HxWEfWq6D3E+Ji:r8+s6q6IwQFh18GuWebCwq/jevHfW5fi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769707488, "uuid": "3792810c-d545-4c9f-849b-6fbc84adc7e1", "value": 2729, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707488, "uuid": "a625cdf9-7512-4ef4-896b-9d99a6ef81bb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1e83b33-fd37-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769707636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707636, "uuid": "9ef93523-1254-4f7f-9d35-02b297558bc3", "comment": "Malware payload", "value": "3274f77c16aedd32a0a249352b9e1518", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707636, "uuid": "465e8dc9-d545-4aea-bb12-b9c0bcf437d1", "comment": "Malware payload", "value": "2d7ce7864ad741bb5f3a19f76d764a28d2c9bf91105f1ca3ed07cd8237c0ad9f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707636, "uuid": "1483d77a-80bb-4b1e-8bff-a4e2205a9b39", "value": "T15D634B41BC819A17C6D4127BFB2E428D372613A8E2EA7307DD255F2177CB82B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707636, "uuid": "ee1b79d5-80af-46f0-9462-fa613460d907", "value": "1536:SPpsWpEdSY2JmQGQ7tQRyTzkhS/Owv0uBs7v/:SPpsVR2J2kQRyTGSu/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769707636, "uuid": "d6bd0e86-fa85-40fa-92ca-541388e785d9", "value": 66876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707636, "uuid": "ab1e97c7-1365-459e-9709-ed2b33286612", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c728993e-fd37-11f0-8b2a-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1769707645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707645, "uuid": "5c8c63c5-51ea-48ac-9e28-9c3d6e107713", "comment": "Malware payload (QuasarRAT)", "value": "2a2917eaca018dc685eb38093a3fda74", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707645, "uuid": "75c539c0-18db-4524-8792-2e60622fd668", "comment": "Malware payload (QuasarRAT)", "value": "f2ddf3189b83629d36697f9337fbacdad5106024aeafb853f46e8f43042899bb", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707645, "uuid": "13e19f03-b1de-4fe5-9204-100798628065", "value": "T1CF46230A37C68959D56EC3B444B888C2A7F4B6DB6B10C71EB5CE23DC5E01796BB127", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707645, "uuid": "ffc19fe6-64c2-4687-a3c4-b872903bec45", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707645, "uuid": "b833c9fe-1f55-45bd-966a-da36078e3cb0", "value": "98304:a5nlkQ/2a9Or4cW+PvkNDHmEQq32yeDGWJ:a9l0agr4cW+P8tQwnW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769707645, "uuid": "920b7e9d-593f-42bd-9d3d-7a30e656e590", "value": 5614080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707645, "uuid": "f48c788d-90ac-4039-ad76-2f9b83887e5c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db0fd3b0-fd37-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769707678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707678, "uuid": "20cfa686-9007-4320-88e5-0088c83e0dd6", "comment": "Malware payload", "value": "8b07e9fc4fb644ca0f7cf801ffb85489", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707678, "uuid": "8061f96b-093c-4f87-b259-9d82b1077684", "comment": "Malware payload", "value": "657d332dd5d88da15c9bc3d8265ee8e7427bbf67d72d9f30642cfa2f601b39b9", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707678, "uuid": "e9c0fd2a-02fa-4515-92d0-17beb74d63b6", "value": "T12DF6122232D55E08D0B387F806A2D9B997337F1A2535D25A20F5BE87FBF39424C066", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707678, "uuid": "d59af554-f9ad-45bf-b390-117476312265", "value": "88f70fb82598484a7ce88eef6418418b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707678, "uuid": "c7557360-056b-438c-9903-5dd356e9890b", "value": "393216:W7F7QNH3hGZSLoMkCLQMWu0VwCnzo+vSe7PEmrkSB:W7F7SXn8cQMWuCzie7P9t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769707678, "uuid": "86f10803-4d45-444d-8a85-64a612d03435", "value": 15542784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707678, "uuid": "09969120-ac85-4378-abad-dc90b2914934", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4be3feb-fd37-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769707721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707721, "uuid": "3ebac48b-6967-47b3-b487-c7dd3f90e502", "comment": "Malware payload", "value": "972114c33aab307a2683a5200b918a4a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707721, "uuid": "c092aa4f-8c8e-42c0-9d73-a8a70e2833dc", "comment": "Malware payload", "value": "6b0cf6fee999e79d5f31a71794c182b4bea9be281caee978844e4a246db0637a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707721, "uuid": "901cfc06-cd29-491c-9eeb-8ad04af5246a", "value": "T113F31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707721, "uuid": "1f6b9730-2540-48e5-a8dc-62f56a01bf58", "value": "3072:EdrK2iu5mGuE/kDkank71vQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0Y:aru8GPAMWLasBeH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769707721, "uuid": "9795ef72-ca47-49de-a626-0fcebdf572cf", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707721, "uuid": "253f43a8-7cba-4b64-8628-100662228273", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "022d13f1-fd38-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769707744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707744, "uuid": "98b118bd-d0f3-4cfa-81d4-cbd6ae195ca8", "comment": "Malware payload (Mirai)", "value": "9f7c52f8b4d4b5d3a4c6bbc439836261", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707744, "uuid": "13908328-1d68-48f3-aaba-a33f52de97e2", "comment": "Malware payload (Mirai)", "value": "24e738af83a0f1e83da9ee2f25e9d70de9ca320dedd540878ddad6aeca4545ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707744, "uuid": "c52a760f-3954-4e0a-8525-a896b7d0d668", "value": "T1D213F807B94680FDC0ADC374477AB53AD53335BE1239B3B63BD8FA129986EA10E1D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707744, "uuid": "101508e1-fbd7-4ebd-9067-6469f0cd4eac", "value": "768:HO5xyjKy5klOY5lYDJN+Tb4/dugGSAnWattnTWufBT7AZ4:C4jKy5klH5lYFsTbUduq+DttnTWuFkZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769707744, "uuid": "a4bfff78-f571-4bc6-93fa-dd6a9b776bd2", "value": 42752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707744, "uuid": "194e4f69-1eaa-476d-b430-e34435960779", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59c10177-fd38-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769707891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707891, "uuid": "c52138e9-db2d-4a3e-a03f-4f2e6c046dbe", "comment": "Malware payload", "value": "fb30741d126037c15577b1fb80b2d963", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707891, "uuid": "cd377cc6-9953-4e56-8829-f5fd9809a466", "comment": "Malware payload", "value": "98557cec055651f889da1f26702c44fa50f0e5642989952da27d773aff772378", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707891, "uuid": "51ef009a-4db5-4986-b991-be3f789fbf73", "value": "T18C83D71ABF510FBBDC6FCD3706A9070235CC651722E93B3A3974D928B55B50B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707891, "uuid": "dd1fe047-f4aa-4f38-9144-8271e54340cf", "value": "1536:qAWQQQ1BSH/EO8U26xUI86bYQNHV54DKVZH+eUQt5mu9NW:qLQQQCH8hcYQNHAKVFB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769707891, "uuid": "17ac8dae-03fd-406b-80a6-713e8ff0a4ee", "value": 85416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707891, "uuid": "4b143574-d90f-4516-acad-476e8cf9035b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ae2cf03-fd38-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769707893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707893, "uuid": "fe73e50a-3c54-4690-8466-7661448272ba", "comment": "Malware payload", "value": "128dd55357452450a9a73439b34a8cc7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707893, "uuid": "29735e3a-6d43-48eb-b634-a77525b23aa7", "comment": "Malware payload", "value": "e7e1bf75711408c59dfe7bc99f7aba1130695b648a7d74af8ec7650ccacb5df5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707893, "uuid": "234860a5-e66a-4a3b-a3c2-d954f549b977", "value": "T141633A56B8819B11C5D512BAFE1E118E33131B7CE3DE73229D246F24778B92B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707893, "uuid": "6bdc37cc-1177-4955-9617-7156697dc71c", "value": "1536:CwnP4ov8WJRXzg/eJixOa9zRn8vmMWQG/M9igpgKu5fYc:eovvr0/2ixOa9V8dpgKul/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769707893, "uuid": "6e72b59a-fc66-457f-b5c6-5629d5e01a47", "value": 72720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707893, "uuid": "2606b143-5fe7-4603-90ff-7d7107a4d8ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "397e35d2-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769708696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708696, "uuid": "712c1c59-cb24-47c4-a1c8-986a6e5439c4", "comment": "Malware payload", "value": "094f7501a2fcb5c1d244375c0d44b94b", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708696, "uuid": "ab302cd4-9adf-4054-91ed-8a5a7dbe1ea9", "comment": "Malware payload", "value": "bc2c976b2c941af732b52616213c6a7f458b01da347584130d21311081ef16ba", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708696, "uuid": "2e672c52-cc77-4fb3-90c7-f9a14c7dc845", "value": "T14683B84E6E219FBDF658C33547B74A31A79833C636E1C685E2ACD2011E6034E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708696, "uuid": "7cdad97c-f64d-49f9-ab58-f538af5e4492", "value": "1536:iX2uliw7qJ64lynKM2deyde9Ie6T1jSaemIG3wPl9eL8wnvG:TYivgKMQjzeG3wPlanO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769708696, "uuid": "8ab9fc63-c284-424c-b927-8e08b71b75e0", "value": 84984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708696, "uuid": "c9994435-c053-4654-adf2-dfd7a25cdc72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25683f39-cd25-11f0-afd0-82aee05be84a", "comment": "Malware payload", "timestamp": 1769708707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708707, "uuid": "99b1a4f6-2bb2-41b7-bcf0-7959c8893e55", "comment": "Malware payload", "value": "98f30fd3fec5a7adaae3eb3843ac7678", "object_relation": "md5", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708707, "uuid": "bf783339-241e-4904-92fa-a320d0d981f0", "comment": "Malware payload", "value": "983f4ed6232cceca7d778e958205808d68f36f3e9239bcdf72c9e5e8dba01bdb", "object_relation": "sha256", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708707, "uuid": "762e9d3c-70ca-46b0-b465-1c8d836ea1e5", "value": "T136321A6597D4C236D97B1E3268B243B00776FA098CA7DF3E1584A11A5CB33518EE2B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708707, "uuid": "80402612-28b1-48a1-9ce0-2baa3ab2ff8b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708707, "uuid": "c217515a-dd37-43a5-bfbe-df1a52c322cb", "value": "192:awP5Ma9T+kq23z8brCvytzOIW1Pn/rjUDqJZHAkRjlHFL2Tpo:LhMaJ+kqY8bGvytzQn/6q3HnRBQTp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769708707, "uuid": "76f5035c-f757-4552-b4e4-d90bea64b780", "value": 11264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708707, "uuid": "1cfb6406-7f92-4089-85cf-a0d40324fbdf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c474ab8a-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769708929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708929, "uuid": "67e0d337-18b9-4b9b-ba5d-e796356c099c", "comment": "Malware payload (Mirai)", "value": "cc5c7f64ddf569c9eeb7c95820cc27dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708929, "uuid": "28a4db52-40eb-40c9-8a1e-d46cb123c99b", "comment": "Malware payload (Mirai)", "value": "39c1f81e4ba60a77f7649a51a7fa7c10b995195f23da65253be3ea1de6de54f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708929, "uuid": "9ed8d70d-9ce8-4d00-b430-39904336e52b", "value": "T1CF132B42322C0E5BC6A66AB0253F17E093FFE9A020F4F585655F9B868275F761087F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708929, "uuid": "44260fd8-e9e2-4e5c-95a4-86c117beb966", "value": "768:s2+mLyDPtK4waS1U54GHGeRwb55aasLpqjpx8RbhooAcdH:dnyrt7waS1U54QZkcFvPAYH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769708929, "uuid": "a9ee0c24-c249-44c8-bb11-473b95256eb5", "value": 41892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708929, "uuid": "b2f16a8f-7459-4527-b018-7fed8db8932f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1aff91b-fd3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769709354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709354, "uuid": "23da7794-6bcd-4591-bb5a-d981aba62610", "comment": "Malware payload", "value": "fa181b3d7ebc3d5248cb1b81d0ef9e31", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709354, "uuid": "bc5a1be4-2fe0-4f14-a3f2-5afe190fd90b", "comment": "Malware payload", "value": "501e45d500b14839b759dffb7a80e6a549f4274a75cbceb074b19ca60341dd96", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709354, "uuid": "fe92c3e4-dd92-41fb-98eb-4fc9aa45a2d2", "value": "T176930846A9819F12D4D631BAFBAF414933136FBCE3E97102D9206F5027C69DB0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709354, "uuid": "13c9c108-7806-4c50-811a-78673731edd5", "value": "1536:2ynPJN8h8UFAWBBhhRUQaoRDAskNrblWTqoNll8i3eAddWY7RM65z:D8hd6+hhRUQa8DAskNrb6ReAddWmMMz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769709354, "uuid": "f009d0f8-0226-4e6c-8c61-7749c4faf0ba", "value": 89908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709354, "uuid": "f8290f47-140b-4dce-aedc-79d988491c05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d225e0-fd3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769709502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709502, "uuid": "838e3c34-eca7-49e5-a533-3069ce00dbdb", "comment": "Malware payload", "value": "f9e24b53839312c300bc6222e84279eb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709502, "uuid": "8d3ef349-a834-4182-b5bc-aa33838a322c", "comment": "Malware payload", "value": "f718c26babbb7e37d42363a9b9fcbcb5bc731215cdf4580e0b8ee45804b422bb", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709502, "uuid": "25204fbc-fae0-4987-8bec-6d5e0da26ce6", "value": "T10BB5238638C024B6DA2BCE31D5D9E196F8773E0D6D343C5D3AB0788C1E756A40B6D6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709502, "uuid": "0cad8282-4466-4e19-b420-0f23461909b0", "value": "815e1ba56e855b07daa7197697b159cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709502, "uuid": "927098c3-ec97-45a8-8333-655fa18dbcf7", "value": "49152:hQQGqXZjK4JNeCg6TChaSOi27VsKjwbsol:hQ6W4JgFiSxKAsm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769709502, "uuid": "8e76729d-6548-4755-ba2d-21fb3228dea7", "value": 2367256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709502, "uuid": "ffe6ad0e-ce9f-447b-82c3-78efced96f75", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "300803b3-fd3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769709539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709539, "uuid": "e5eb6915-d727-43fa-8f10-7e243706507a", "comment": "Malware payload (Mirai)", "value": "58a73b2b5c43f65a5b6cbec2c7806f8e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709539, "uuid": "4efc26ef-35cb-4855-8bfa-5913e3b79299", "comment": "Malware payload (Mirai)", "value": "5f2626f276be20376987019a197f56b88b03641e7e41e28c4cd5bf0aa81f3a4d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709539, "uuid": "15639b32-976a-4ace-a81c-3edf028ea9b5", "value": "T13E037DBAC4296D84D5154275E8358A7C6F63E110D3833FFA5B4985A68047EFCFA0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709539, "uuid": "84aae7ad-6ef6-4064-b120-7e95d800597a", "value": "768:Ha9fewtwwF6KHX/3ee1dEigANW3qrfCXoCfaCi:HadewtrVbCchfHMaCi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769709539, "uuid": "c2c3eaf0-6aaf-43e3-b50d-c8be2030995f", "value": 39212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709539, "uuid": "8df23c0f-1ce9-46a6-8d08-98506f439f97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b70bbad1-fd0c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769709847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709847, "uuid": "9828ac6a-60bc-478e-bbf6-adf82a5ff7c6", "comment": "Malware payload", "value": "ac995f164e1d9a65e2389b9c5911e4b6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709847, "uuid": "e8858a7f-e168-4c14-bd4d-f9c46e4ac799", "comment": "Malware payload", "value": "c932be8d6bc054a018e2c608b7b3326b8ef68eff2ddd837c884b83676791f0ea", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709847, "uuid": "6e3d9d26-77a9-4d79-a07d-97cc106e232c", "value": "T178310C6ECFE6FC16DF05A5FB30D3B015F149ED868554C317C9799B8319040EA169AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709847, "uuid": "0d666d09-f088-42be-bf19-7a261aa8bf84", "value": "48:9hFd1nGw8acCxFrTUoMo/MRX9hl/4hEeUmyn:3FdgVaNqX9vAhjUmO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769709847, "uuid": "e7084c7c-a4fc-4011-adda-8b4e74cf2588", "value": 1597, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769709847, "uuid": "f220de23-a961-4b5a-9b34-de26ec09ba84", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4a51f34-fd3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769710298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710298, "uuid": "950c791a-a1d0-46a6-979a-21f90e2e6974", "comment": "Malware payload (Mirai)", "value": "3f5d14f496257059ec1ad08b2cedfdff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710298, "uuid": "5cd9e06f-7904-49a8-b4dc-4798ed58dd39", "comment": "Malware payload (Mirai)", "value": "ac93f2904cf9648842370419fd0e042013d562cb205b5db38e36f46c0416ad05", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710298, "uuid": "e08c1f73-1839-4c00-9936-c17470791d65", "value": "T12B035CC8B903DDF8FC1606F42136F77A9BB6F07A2128DD9BC39995329C43A05A5062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710298, "uuid": "649a53de-06ef-4987-9aab-f5ffa5e05187", "value": "768:wZT8epBPi4gJW0KMcjp49A9/YuEGP/qmpEgouBnk6PyZiE9Ee4V:wZIezPi4gJW0KMgp49Ax8sVpFxBnk6Pw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769710298, "uuid": "29a9e0b8-c073-461f-89bc-bcbd82f49e03", "value": 39356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710298, "uuid": "1d1c6c76-0e4b-4d74-8d53-ef70a8d195b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54ebab10-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1769710467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710467, "uuid": "25e25ae7-e50e-4377-9279-fc1ea4ce3aaa", "comment": "Malware payload (Gafgyt)", "value": "67e94b9b6bdd9c65196fb67d8831d385", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710467, "uuid": "1ab09cc8-4bae-4abe-abc3-076f3ab09ef2", "comment": "Malware payload (Gafgyt)", "value": "47b6dfc07a4ce2522a338e98ee97946f5cd74e92ea376b12105707f30d372ac8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710467, "uuid": "77b40355-133e-42f8-8822-375f2c7e57a5", "value": "T1D8019AEF01A44C6D1184FA4EF9F24E75A80A7ADD64C50F4C5A8F2C39398D918B835F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710467, "uuid": "b432d597-1782-4acb-a7a8-87c2bfe28898", "value": "12:t9ILJoZDSLJhHWFLsySLshHWFLPBzvSLPBzMHWFLPnIjDSLPnIMHWFLPiDSLPDH5:t9ICZeTWFw5wRWF9z69zGWFzJzhWFGeJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769710467, "uuid": "2239415c-7f47-4545-9edf-1fd2c3d5f5b5", "value": 657, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710467, "uuid": "fcb0faed-7427-4e8b-9861-d4307ffa10b1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b069ac0-fd3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769710866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710866, "uuid": "8506dbcf-151c-4e54-87a7-4185099cddc3", "comment": "Malware payload (Mirai)", "value": "5e16e76b39c758ab7d77aef9e5442662", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710866, "uuid": "19882141-d61a-49f5-bafc-fb6793ac2325", "comment": "Malware payload (Mirai)", "value": "109e11093b5a82c187c4e4f7c82fffd659e7e340d8e594b35f4929be844de89f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710866, "uuid": "16fcb8da-9d8b-4591-99e0-9448fa41a024", "value": "T1B1F2F892B8929D26C6E4237AFAAE018D336173E8D1EF3217DD215F047BCA51F0D67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710866, "uuid": "cb505f82-6e03-46ef-84b2-a34ee4956e8b", "value": "768:KY8dbugYpYSaHXsL7uyMln5EPC8wa80eCSCc5TZxY4o/h/IPN:KLSgjtXrL8wQYZxY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769710866, "uuid": "9f46c9f8-496f-4e58-9d7a-82b206d3ffa5", "value": 37160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710866, "uuid": "2e83f950-5264-4fc9-bde1-8cbd3318630a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c8c0fdb-fd39-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769711304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769711304, "uuid": "4aa8e393-797c-42b3-a49d-b887e9700333", "comment": "Malware payload", "value": "ebcca223b78417ed8bfe65b3b59e86da", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769711304, "uuid": "dd9dce57-d708-4226-8127-dc36dd6f49ec", "comment": "Malware payload", "value": "7b9b305cbab120d4588f812655f1820437d32722d640719df33a98518f15015d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769711304, "uuid": "4953f6cd-3a04-4341-a4a6-79bcd04e0948", "value": "T1F0533B51FD819A12C6D412B7FB1E428D772613A8E2EE3307DD266F21778782B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769711304, "uuid": "c9e012b7-d82c-4c7b-90d7-c54b912a7ea6", "value": "1536:5KPb9a7hwTp+QxBlx+zDw7VSZOCDAKALlYw:kPb9LpFZxADK+Ad", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769711304, "uuid": "96adda81-4f13-465f-8011-5ab1f8540b29", "value": 63620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769711304, "uuid": "f1569072-90c9-4b91-a245-184913f4cafd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fd7e293-fd40-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769711444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769711444, "uuid": "9d434d4a-7742-45e4-8ec5-61a949beb6ca", "comment": "Malware payload (Mirai)", "value": "b9caaa170e720b201c176befc53a96f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769711444, "uuid": "68fe3608-6496-4af7-b691-8871464dbc66", "comment": "Malware payload (Mirai)", "value": "c333a3024f295de350784a1963b415e7ff0d41b2e9d92a4f9f53dee6175d58b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769711444, "uuid": "bc68d56d-cd02-4dda-8262-0f831dc08adf", "value": "T1D143971E2E619FFCFBAD863587F39E219648339216E1C684E15CDA011E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769711444, "uuid": "56cba739-973d-4a9f-afdd-45ec9a1dbee1", "value": "768:RaT+l5PNxAGJYmzrEIPfEIXwKE5jNxAjACOFym6OCL+c34pAOreBAWslnk/zwy:Rn5FxAGJtzh6H5jN2ZL+c3EzCwy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769711444, "uuid": "bfbbccc0-ff2d-43fa-aa68-2dcf73a3611a", "value": 57108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769711444, "uuid": "9db4db54-2566-4aef-b835-0dcec9eac7d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "277585b6-fd43-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769712531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769712531, "uuid": "b4b901ea-86b6-494e-aa65-984887a25b62", "comment": "Malware payload", "value": "8cf7e252d7f998e5dca980a8f615f541", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769712531, "uuid": "42ffbce0-8e58-4f87-88c3-a3f31e1de252", "comment": "Malware payload", "value": "09f6f096b30b7e913f654253632436eba053c711b8497ee5b79ae93d209d3c87", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769712531, "uuid": "0d9ca923-5bda-4a6c-b507-c55654995778", "value": "T1705612A181383494AFC85A7160D360657C4DEB3522B93C1FEDA3EDDBD1312698E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769712531, "uuid": "19e6db45-6cd0-4919-baee-ca8278452142", "value": "384:UWZByT7/i8mwN0icUkAwNFUMh0oBN0Cs2QCNfFW7Vt/iwNFSwJ/mvlnWNNnTsGvf:I66LpIhEbjmnTZRbdYR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769712531, "uuid": "24cefbff-5027-49dd-92af-74deed62efd2", "value": 5910019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769712531, "uuid": "a6c342bc-ae03-4a86-b81a-8715d87a6e7f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f539955-fd44-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769713135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713135, "uuid": "050f6324-3b7f-4fb3-a375-d0a52956d253", "comment": "Malware payload (Mirai)", "value": "7c91d87261e8a046a842fc2a83ce79e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713135, "uuid": "f624258b-a426-4fd4-ba55-d40b19aaf65c", "comment": "Malware payload (Mirai)", "value": "f2b40c9e27f3ffde575637eeae93ba96808a043b2c83f4f19a8a811c18bb089c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713135, "uuid": "429f603e-c6c7-4298-9efa-a056cf4ee2c2", "value": "T1D8D3E842BD418F13C6C322F7FB9E42987B266B6DD7EA3102D8257F54378A4D60E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713135, "uuid": "5b9474ef-9efd-40b2-a657-ec9f25f6c390", "value": "1536:nh9HoCtxP+k5962fNknd2UoeI4V5IA+b+usuIulLOwywyIQjv3vwxzytPP7y3F3F:n3Iah+k7Gnd+4oA+K9u0vwG7ehmzQz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769713135, "uuid": "335519f7-17ff-4a86-8d77-9779c1b67988", "value": 142992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713135, "uuid": "517f17d0-ae4e-4bc4-9c70-c79c4fe0a2b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7348805f-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769713517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713517, "uuid": "a704d5f7-9c37-4a78-9769-f290fb2062b8", "comment": "Malware payload (Mirai)", "value": "2c3f98eaa05cfea747ac9c3f1d43bc56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713517, "uuid": "92f795f1-a06d-47c9-a519-dc337c453b20", "comment": "Malware payload (Mirai)", "value": "396117719524c1375bf36d679f1b976bb33f12ad1cdda8ffbbce11107b1f9a69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713517, "uuid": "0563fa26-1864-4640-84d2-242b67b5e0e8", "value": "T1E9438109BF650EB7EC6FDD3709A9174524CD651B21A87B3A7D34D81CF20B25B19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713517, "uuid": "1040d485-40d3-4a56-88e4-18e105c6f74c", "value": "768:oLWu89xw1IlGGUantl0oxY966x1EnB6NTcWlp21wmNOUGpCIMtjej5dIne2el9e2:oLWu8fwgUqkkLg9gzStS1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769713517, "uuid": "d24498c6-cfa0-4599-81de-df605e13453b", "value": 59220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713517, "uuid": "45aa8ef7-e5a7-4df5-b2dc-6f3b03d4b585", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff086819-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769713752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713752, "uuid": "15945344-73f9-4b0c-9654-96f2201b10bf", "comment": "Malware payload", "value": "29950392ba73e074f09bf13d24636a02", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713752, "uuid": "99df2b7d-169e-49b6-808b-a918afc30edf", "comment": "Malware payload", "value": "f27d581a710b83333c93312db15454f111544b564a4f2ede082114c9bfb74969", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713752, "uuid": "27de90fb-e2fb-4807-8cd0-507010c44bb7", "value": "T1A28612C5731141E4B6ABBF425FA5798D8F2E6E24A708E81840B97DC10E7EED711608", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713752, "uuid": "84ea3fbd-1a85-4d0a-aa96-9c0665c6923d", "value": "196608:Q1Vp42u40EwtZclrGvWmEiZhmhHglI8D0NWWnzzE7+nJ2vPY8sfH9ma9BEJHjxS:Q1Vqu8gnzzE7+JsYtfH1wS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769713752, "uuid": "2984bf7d-d1d4-42fc-aee4-f9138e760b23", "value": 7863296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713752, "uuid": "602a69c7-262c-413f-86a7-865a8a43bf68", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769717470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717470, "uuid": "9190f20d-a7b0-4aa0-a498-3e1d7bce2b54", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717470, "uuid": "f3da1e11-04ce-4246-8684-b7cc112ddede", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717470, "uuid": "d62372e5-547c-47fb-9991-7c45b692c2ef", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717470, "uuid": "29cff75e-b4e6-4902-a677-8d4a67a06a5e", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717470, "uuid": "09770457-822d-4512-ba8f-47eabfc33d93", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717470, "uuid": "f41672f7-a59a-4b69-8d6a-858ec7034789", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717470, "uuid": "01c4728f-f754-46b9-bd2c-30ab4d0b8f69", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c97ec9c9-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769717527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717527, "uuid": "81878778-089e-40e2-87f9-5d7bbc8d805a", "comment": "Malware payload", "value": "28f238ec4152dcff36651f144f0b95a1", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717527, "uuid": "40cdb7b1-0f34-4627-bbed-b983be4f0734", "comment": "Malware payload", "value": "dd0837bac538904c628bbdc0279da235e3c905f14b96acbfa5c07d244fbe3519", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717527, "uuid": "e9c58152-6771-4f04-add0-a08da5f1ee51", "value": "T108017BB66601023A7C52449FD8E2C95874476233D880345478ECB586EFEAA2D7631F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717527, "uuid": "e35d3f52-12dd-4567-8fb2-d0cc750c3d31", "value": "12:ftYz7HTe092n2Py9kHfu/sAZaQu6fIqwjQ8Kw8rFy9qy/W:fMTe09HPyYG0AoQmq4Q8KwIye", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717527, "uuid": "7b065664-b42c-480d-a604-8d30c40f2cff", "value": 703, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717527, "uuid": "adfd3989-02c9-4017-9fa6-0b174aa6efdb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9b0dcc5-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769717528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717528, "uuid": "23865f18-b469-446a-8d82-3dc5f2d5cc68", "comment": "Malware payload (Mirai)", "value": "fdbbb5aec2548f1c4314e25a73d5e184", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717528, "uuid": "201b75ea-b1f7-4248-b535-d22f43ea73db", "comment": "Malware payload (Mirai)", "value": "116ae48d90b3ff57c1ef13987f58543c60df730f3778b51a3c42aa5f78b8f219", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717528, "uuid": "f7ed3ac6-1841-472e-ac2b-b0f400e400d8", "value": "T1CBA32B56B952CE12C5C221F6FB9E824C37236BA8D3F93102EE25AF9127874DB0D771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717528, "uuid": "7bb1026f-d680-424b-a780-5e3f80b4b22d", "value": "3072:YFVNdFhffkL0OvxETavQFZtvhnhBj0E28T:YFdFRfEve4GVhnHj0R8T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717528, "uuid": "aa1c826b-55ce-460e-ad6b-ec95a8c47004", "value": 105624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717528, "uuid": "a592a990-bc58-4c2b-8d9c-f7aed66bed25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca765533-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769717529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "01fb91c3-00a1-442d-8178-93c77d042a7f", "comment": "Malware payload (Mirai)", "value": "0982b2347373e68535916b3177ed2b2e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "3908530b-f2c7-418d-a88a-b4e7f58db16f", "comment": "Malware payload (Mirai)", "value": "da5e1f0c7213c1d78814959d9495a6d12006d7905dee868445019a7ff381bfe0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "98550ff6-4ae6-4b6d-816d-912dd658556f", "value": "T1A4C44A55F8809F62CAC52976F69D829C73134779C3EB72069D144B383BDB8AB0F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "b8488898-ab13-48ad-add6-e923f1af6942", "value": "12288:/CEhBBbErS0XOcdFoqFJRjWmBeegpuormD:hbE4AoeJBYa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717529, "uuid": "2aea5f79-9377-45c9-b356-7837f182389c", "value": 570688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "6fa72f64-72f1-4d21-a24a-030c2f179417", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca84d90a-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769717529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "bcae3668-dc89-4623-be52-20bc95f3e39e", "comment": "Malware payload (Mirai)", "value": "34c445a627a7a200c5c672bb018601e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "de8095fa-d3f5-43e1-921c-6a0e87a6b0c4", "comment": "Malware payload (Mirai)", "value": "5bfbd1beb71be2ff5e9617ecf1f5c8d7400064fbcbb483b484179c6f66df6b12", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "10b868fd-0a81-4849-a87b-311d1080138f", "value": "T104F34A87EF890ECBC457CEF0867F43AB19E3569B8CC2A1F9487C8D1879591CA45E36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "8a4b47a7-34eb-428b-a23e-e06ac72cd661", "value": "3072:DQrb3xU1j4520mWRcufhpHG3duxayUfZfrsWfnhoxq:crqs52kVhpHG3daay+QWf2xq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717529, "uuid": "66d20234-9a99-4453-b024-ad38022737b8", "value": 172092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "5806bc94-1b0f-4d44-abe4-82a935f652c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cab88845-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769717529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "9cf9414d-65a4-40d7-9fed-ac5b56b64af7", "comment": "Malware payload (Mirai)", "value": "30fbf31b17fe8bb67b0d8dda02cf8f60", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "332ba84f-36ad-4736-bdc1-49156be04848", "comment": "Malware payload (Mirai)", "value": "d278b94ad61a5f2e27cb319704207e86f6656fdf2b6bf8422508346f53457f15", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "d8e21640-79ee-414a-ac43-aab05baf3b73", "value": "T195C45B55F880DFA1CAC52576F74E829C33174779C3EBB20699245B343A9B86B0F3E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "18104d8b-443b-484b-b938-c201ffed9037", "value": "12288:0CH75bpGig0XMRFEjlAxE6zdeIrFgpuor2p:R5bMnFAl01z0Ir8i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717529, "uuid": "3e0379aa-4582-4880-9194-87a60331973b", "value": 558404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717529, "uuid": "464b6ed5-2a76-41a4-971f-a714696d06af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb2a095e-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769717530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717530, "uuid": "db872667-3d43-45c4-99a0-dfdbc2fb8b32", "comment": "Malware payload (Mirai)", "value": "de37d5c1cfa6b5aff5918de1e2b173e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717530, "uuid": "bfdf1d70-9ae9-4718-a593-eba1cbcd53f3", "comment": "Malware payload (Mirai)", "value": "43f134651687882a658830d31573e474fa5639432c1775fa879229d1a9ad0296", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717530, "uuid": "968d073f-81d7-4f23-a61c-7887cd08f79b", "value": "T104F45B02EF950FDFC4BFCD34452E824716ECD9D706D1A234A1BC899CBA8966A4BE34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717530, "uuid": "020bae6a-ea3d-402c-adc1-679ffac630ba", "value": "12288:tHVrcVz7h+mDRhHkih1KugJMh/zmz8zrzIK/vlmEi2abVNMn68AH7gHIYSdtB+EB:1tG8NmP3gZLI7Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717530, "uuid": "6924ef7f-ebc1-41e0-adf4-fc3728569b7c", "value": 730664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717530, "uuid": "b0093cb6-4131-4c95-98fb-588460e7fbc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4d1fc7-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769717530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717530, "uuid": "53655e65-bf3d-4f19-aff2-376de5040fe1", "comment": "Malware payload (Mirai)", "value": "89915c9f0c04ae5146a3091db9ec08ce", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717530, "uuid": "699ed406-e1ff-476c-bed0-9b8f5b2db403", "comment": "Malware payload (Mirai)", "value": "ab73efe190dd5dabc1adfc57195dcae5b4f119e0ed5cee7895e4186ec23bb092", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717530, "uuid": "a31cd190-8320-4297-a62d-c6cfc853b3c5", "value": "T15EC45D59F8809FA1CAD529B6F65D925C33130B79C3EA720799245B343BC78AB0F3E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717530, "uuid": "153d835d-bfea-4ae6-a5cd-b5cafbcf1922", "value": "6144:tcybXnVx91MMoGSBfgq6smz0TW23mQO0hST1HEvjVlY8cpo5fKoahD4QgfgpuorC:vXVeQS5dm7F1OBikKFhDKgpuorYx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717530, "uuid": "cd848ed2-6b42-4d1c-8113-82ea323f49ee", "value": 558508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717530, "uuid": "e0e92ff6-239c-4c06-9859-d7330ffe45a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc3d54f8-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769717532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717532, "uuid": "14558907-a9fc-46ce-bcd7-b66f09835a06", "comment": "Malware payload (Mirai)", "value": "9bce83314d97cb97eb8f92dda8adca58", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717532, "uuid": "c2e324d7-6fe1-43c5-a105-b418e937a3e8", "comment": "Malware payload (Mirai)", "value": "a3febcbb9180e72f1a8115daed470042c77749417900b6dd168a9d9c1e5efcd7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717532, "uuid": "b8c31079-096b-4ebe-9474-4d93dd37b37f", "value": "T1FA058C98E786E0F1F26344F1024EEBF71534A12A5013F6F6EF46266774327A16F1A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717532, "uuid": "64b7d698-f8b0-4e89-b22b-56d3cd3d8c39", "value": "12288:0bUk238gOspl4hvshnWL2SVYH56NP7OprPs0H8uqNUuuYv0PyI/cW4ixyvKELu:052sfc4hvshXSKHojQTs0Hwvgf4G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717532, "uuid": "e7469d14-dc2a-4bda-9389-4a7a8db32aa9", "value": 865912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717532, "uuid": "bc0f13cc-499f-4dc1-be69-445a691ed8e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd173bcc-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769717533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717533, "uuid": "30dbf9a6-960c-46d6-808e-003e4473acc9", "comment": "Malware payload (Mirai)", "value": "bad076df688cef732c786317e00e3114", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717533, "uuid": "e608ebc1-c556-4a20-8ddf-e7f5a0b32546", "comment": "Malware payload (Mirai)", "value": "ce985bb3687be868da7ac9681bb48be74940afb02b721d43b83becd2ec8fbdea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717533, "uuid": "92c39120-1be8-49a1-aff7-3c022f383477", "value": "T13FF48D73BB218FA4E365D67405F386156A9413A20AF791C193BCC6147A50B6E2C2FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717533, "uuid": "3cdee50d-c10a-4931-9809-7131af1a4045", "value": "12288:86SdKklHtR7My/wHlGnIgS7yEK+//X7zgpu3iikI+fuk:BSoqHr7+UnIgSFL1Vkh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717533, "uuid": "e4557e59-be53-40d3-b44c-c0246b13616b", "value": 730664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717533, "uuid": "38d6c3ea-569e-4d84-9539-8e2785bc9fdd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04a472fb-fd4f-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769717627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717627, "uuid": "83a6f31d-d259-47ef-bc6f-32a088d4d7e5", "comment": "Malware payload", "value": "a1ff2becc9c5351b607309d23a293292", "object_relation": "md5", "Tag": [ { "name": "181-235-3-218", "colour": "#b68dcd", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717627, "uuid": "f3089863-597b-4761-bbe6-d2d4833f497e", "comment": "Malware payload", "value": "ae774eec9fc52e2d9a6c00401f0d18e2fb84cf5657091ea6a602f4a4e8099f57", "object_relation": "sha256", "Tag": [ { "name": "181-235-3-218", "colour": "#b68dcd", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717627, "uuid": "4f29c5ba-50de-4ce4-a34b-a27f338df78d", "value": "T174B533B56447FD8A2F7B2DC4E0611128ED489D979362492CFE8B79FC68D5438CEA84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717627, "uuid": "9845bf36-c90b-403f-9328-79abb619979a", "value": "49152:8A3C2JyJiuj0gtd7D5188bLtUqh9Scxrkvd:8QFcXj0gP7l1FircxrU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769717627, "uuid": "24882b79-0562-44c8-b971-30aea8c0c6de", "value": 2390771, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717627, "uuid": "daaef716-bd3a-45af-ace8-e0c2339ee99d", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8f9cc3d-f79c-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769720118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720118, "uuid": "eb03abc7-c4fa-40fd-81cc-9ce541c9e144", "comment": "Malware payload (Mirai)", "value": "702640787ee584740579c6a72cb6607d", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720118, "uuid": "bfa9c5fd-7b01-469c-adf2-b08eddae7f76", "comment": "Malware payload (Mirai)", "value": "49ccefcae857e0c29361d2d01be8bacc1902ee15563c5f9f4fcaf6ce06ad0eb0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769720118, "uuid": "d1204074-9a9c-4f91-a4ed-206474967fa1", "value": "T1BB64F1CAEB11BC3AE985077135A70B5DF7B4D99A82C3E090F2D4C55E3CAA2C5B7611", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769720118, "uuid": "293a9157-4201-4057-afe0-99be1da29a8b", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio4a5POdOQ33Q:p3lOYoaja8xzx/0wsxzSiwPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769720118, "uuid": "5130e6d5-4fd6-47ee-8d0a-5241eb28bc94", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769720118, "uuid": "ccdc50b2-8f60-435a-824b-ee0c1d87e7f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84e6f8e5-fd5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769722566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722566, "uuid": "18a45d84-5c89-4248-911e-caa9e22eec7a", "comment": "Malware payload", "value": "47bc029ea8f6ceda65c3b60bee7a3b83", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722566, "uuid": "3ae66794-90fe-44de-97f4-a605b3f7e56c", "comment": "Malware payload", "value": "66ad70995be6ac7dad8166d2059ec0d221bc83b5293b06b7c17149c5b9973724", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769722566, "uuid": "5f5be4a5-b50b-4389-96d5-fe03d3573c7c", "value": "T1F6A4197E9C60E376F50CD0BAE285D3625E2178410525EFB328E9E7200589572EB1B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769722566, "uuid": "8fc666b4-f817-4c3a-8e1f-269ebce25dde", "value": "8e3655ef97cca59f20668c33c5a9f65a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769722566, "uuid": "d31da198-8771-4ae1-bda9-3b3ed663e565", "value": "12288:4EDSyhao0xX+I5sOrJ3jHEm4Vb+2yjJ9:4E2yhV05TF1Am4VbcH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769722566, "uuid": "36154368-2a73-4661-b158-1cdead768c93", "value": 457728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769722566, "uuid": "1b33d7c7-878a-4caf-9a99-ea17ad2ac06b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0967fcc-fd66-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769727847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727847, "uuid": "9c0bfca0-f0f3-4203-9761-175e66f85c70", "comment": "Malware payload", "value": "7a32574d788b65fc2b96cfe7912e04e7", "object_relation": "md5", "Tag": [ { "name": "24x01x2026", "colour": "#8127e5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727847, "uuid": "ee5b214d-097f-48ee-804d-2fc867d464fe", "comment": "Malware payload", "value": "185126c52824f31173b189418bf6fc6ddf4112c61d35cd3d230439423c0434d4", "object_relation": "sha256", "Tag": [ { "name": "24x01x2026", "colour": "#8127e5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727847, "uuid": "8b5b8518-d478-4164-ab31-39d188c9e3ac", "value": "T105347C51B7A80CFDE97B813DC9564906DB72BC560761EACF07A04A934F236E48E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727847, "uuid": "19369bf4-6c01-43d3-b24a-a7901d74df64", "value": "0bc790d86115172fa0bd2d854a03262b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727847, "uuid": "3c331426-240c-44ab-add8-93eacd57513c", "value": "6144:rIyU47mUrzqoHebYVNTC5NYCceNEVK1iwu:rRbrzqoHebaGNY0Ex", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769727847, "uuid": "9ede4e15-0a56-46ee-81cb-a28453c5e6f2", "value": 252416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727847, "uuid": "a5812d69-9c1d-473f-935e-73041ac61813", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1763c734-fd67-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769727966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727966, "uuid": "36fb362c-c860-4cdf-9cce-00aab6137dab", "comment": "Malware payload", "value": "7b2cba7ce9792101e7180994efc46b8f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "zobpx", "colour": "#c91779", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727966, "uuid": "692b9ab5-cc73-4b8e-b1dc-2b34dde1b5d5", "comment": "Malware payload", "value": "b52943263d9b10f2ecd5afcec024470bd87ad0b5efda0b5d7f2066f955351588", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "zobpx", "colour": "#c91779", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727966, "uuid": "120eaaf4-d4d8-48b0-9fad-d4250cb6b6ae", "value": "T1BD748D56B7A418F9E577813CC9630A06D7B2BC660760DBDF03A046964F277E09E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727966, "uuid": "d52331de-baf7-4a87-a002-91e5991bb069", "value": "c546646952cb160243a67da7651da44c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727966, "uuid": "e0457c52-1670-4619-8475-54625c9cc9e1", "value": "6144:WnGd4/gAIJkHNCBkCVgDPV3Y6B9fPcl31eJhpAd+xZ:WnGd4DIJkHeArV3Y6BBcxMJm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769727966, "uuid": "84efbf32-d98b-4bd6-a733-324b7902016c", "value": 362496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727966, "uuid": "063f255b-8ad8-42b8-94fb-c1b013202f50", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769644942, "uuid": "c90cabbb-fca5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.255.161:45319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645016, "uuid": "f58b8410-fca5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.17.117:53334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645425, "uuid": "e96334e2-fca6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.158.9:32804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769645602, "uuid": "52e4902e-fca7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.185.248:55400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646016, "uuid": "49b4967c-fca8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.54.182:35133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646092, "uuid": "76c5c2f0-fca8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.141.251:43550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769646621, "uuid": "b1de1ba4-fca9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.170:42748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647461, "uuid": "a6cc6294-fcab-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:49029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647570, "uuid": "e7c6cdae-fcab-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.106.21:54015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647661, "uuid": "1ddb69b5-fcac-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.198.6:42136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647695, "uuid": "32199d7b-fcac-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.71.80:35867/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647759, "uuid": "5863cdfc-fcac-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.98.138:55968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647759, "uuid": "58812f96-fcac-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.17.117:53334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769647759, "uuid": "58884810-fcac-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.28.49:44457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769648108, "uuid": "286da6ce-fcad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/relight-73-unsigned/tk-hz-ctrl/ypfcbjy5exc2pzs4bc7j", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769648170, "uuid": "4d80cf12-fcad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.170:42748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769648170, "uuid": "4d92cd9a-fcad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.127.159:45764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769648367, "uuid": "c2a1eaf8-fcad-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.26.145:57361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769648715, "uuid": "922a0edd-fcae-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.220:35716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769648834, "uuid": "d914a44e-fcae-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.98.138:55968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649261, "uuid": "d77d12a1-fcaf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.198.6:42136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649319, "uuid": "fa31b99f-fcaf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.106.21:54015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649375, "uuid": "1b42c41a-fcb0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.149:38993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649384, "uuid": "20ada53e-fcb0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.138:35245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649429, "uuid": "3bf51c5c-fcb0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.155.202:56813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649798, "uuid": "17644806-fcb1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.199.244:43020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769649978, "uuid": "8328a8b4-fcb1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.102:51280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769650339, "uuid": "5a531d81-fcb2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.220:35716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769650877, "uuid": "9ab56f65-fcb3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.149:38993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769651052, "uuid": "02f230d1-fcb4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.175:52855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769651356, "uuid": "b87e78fc-fcb4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.172:40712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769651651, "uuid": "67dcff12-fcb5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6382108206/SIiNvbX.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769651659, "uuid": "6cf96f05-fcb5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.216.250:34331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769651898, "uuid": "fb1492b2-fcb5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.18.147:33710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769652311, "uuid": "f1408d0b-fcb6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.62.48:41984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769652376, "uuid": "186a913a-fcb7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.172:40712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769652614, "uuid": "a5dd0582-fcb7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.39.213:54025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769652667, "uuid": "c59758a8-fcb7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.175:52855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769652857, "uuid": "374489cf-fcb8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.155.202:56813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653337, "uuid": "552ea98f-fcb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.66:39475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653446, "uuid": "95fb60d3-fcb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.83/bins/wget.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653446, "uuid": "9647e4fc-fcb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.83/bins/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653448, "uuid": "973d171d-fcb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.83/bins/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653448, "uuid": "973d42aa-fcb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.83/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653449, "uuid": "978eb228-fcb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.83/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653568, "uuid": "deda7176-fcb9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.66:39475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769653988, "uuid": "d959b101-fcba-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.194.152.180/download/update.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769654238, "uuid": "6e0a4f33-fcbb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.3.105.59:41838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769654538, "uuid": "21029ad4-fcbc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.43.56:41601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769654722, "uuid": "8e591ba4-fcbc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.12.33:41465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769654828, "uuid": "ce1457c2-fcbc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.21.222:60688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655018, "uuid": "3f41010f-fcbd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.20.72:37359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655080, "uuid": "63ffb10e-fcbd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.131.177:43869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655270, "uuid": "d51fe037-fcbd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.24.68:55801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655318, "uuid": "f21709a5-fcbd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.83.168:52003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655558, "uuid": "8109a589-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.177.2:51583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "c8f582f6-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.200.246.236/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "c8f7fce7-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.200.246.236/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "c91a7c94-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:50231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "c945c388-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.250/bins/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655679, "uuid": "c947990c-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.250/bins/mipsel", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655680, "uuid": "c957eb50-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.75.248.215:45949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655680, "uuid": "c97c3ebb-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.227.77:35771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655733, "uuid": "e942946c-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.250/bins/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655751, "uuid": "f4156cb7-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.165.192:56912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655795, "uuid": "0de72542-fcbf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.134.103:48521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769655976, "uuid": "7a4ecc75-fcbf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.43.56:41601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769656281, "uuid": "2fea5425-fcc0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.12.33:41465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769656353, "uuid": "5ab04bc3-fcc0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.25.199:44175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769656571, "uuid": "dc717f10-fcc0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.127.159:45764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769656702, "uuid": "2a88b1a5-fcc1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.227.212:58508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769656710, "uuid": "2f46fdd3-fcc1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.133:56907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769656819, "uuid": "704a74b9-fcc1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.243.8:41599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769657122, "uuid": "25280b84-fcc2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.134.103:48521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769657232, "uuid": "6693db7a-fcc2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.24.68:55801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769657719, "uuid": "88ebe831-fcc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.10.149:34842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769657838, "uuid": "cfeacf9f-fcc3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.177.2:51583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769658011, "uuid": "373286f1-fcc4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.204.196.254:33691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769658012, "uuid": "37b963d8-fcc4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.20.72:37359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769658560, "uuid": "7e74c020-fcc5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.133:56907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769658619, "uuid": "a1790bed-fcc5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.210:57328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769659096, "uuid": "bd78af75-fcc6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.184.113:35027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769659697, "uuid": "23c2cf24-fcc8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.210:57328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769659875, "uuid": "8ded5315-fcc8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.65:39269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769660410, "uuid": "cd1ff6ee-fcc9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.171:44583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769660588, "uuid": "37355962-fcca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.171:44583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769660593, "uuid": "39c2c488-fcca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.107.59:55394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769660720, "uuid": "85cbf1d8-fcca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.251:60168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769660773, "uuid": "a5213f5a-fcca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.184.113:35027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769661378, "uuid": "0dc99f4e-fccc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.65:39269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662229, "uuid": "08dc8492-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.107.59:55394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662231, "uuid": "0a89a181-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.27.235:54066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662232, "uuid": "0af240ca-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.118.54:49488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662271, "uuid": "224f848f-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.71.70:46514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662328, "uuid": "4461011e-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.251:60168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662330, "uuid": "454673f8-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.71.70:46514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662331, "uuid": "45cc7cad-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.81.207:50059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662331, "uuid": "45cde555-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.81.207:50059/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769662991, "uuid": "cf5faa2c-fccf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.94:59789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769663478, "uuid": "f15c0853-fcd0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.27.235:54066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769663711, "uuid": "7c79049f-fcd1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.228.151:52593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769664198, "uuid": "9eb46f9c-fcd2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.226.5:43796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665223, "uuid": "0172e64a-fcd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.78:57156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665343, "uuid": "4930a1d2-fcd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.145.48:45169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665397, "uuid": "697dfc7f-fcd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:37494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665631, "uuid": "f4c303b7-fcd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.248.117:46867/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665759, "uuid": "413961ec-fcd6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:37494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665881, "uuid": "899a8db9-fcd6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.183:37350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769665999, "uuid": "d07e2c18-fcd6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.142.92:45946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769666178, "uuid": "3ac6c684-fcd7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.145.48:45169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769666479, "uuid": "ee646e88-fcd7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.94:59789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667020, "uuid": "30dba8b2-fcd9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:41986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667069, "uuid": "4dcea277-fcd9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.84.202:44705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667208, "uuid": "a0b8bf51-fcd9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.118:59997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667209, "uuid": "a137b0f3-fcd9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.111.23:34694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667263, "uuid": "c168c800-fcd9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:50876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667378, "uuid": "0606e5c1-fcda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.0.5:46269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667623, "uuid": "98282c87-fcda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.111.23:34694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667741, "uuid": "dea9e833-fcda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.142.92:45946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769667742, "uuid": "dedc9c3c-fcda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:50876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668507, "uuid": "a728528c-fcdc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/grading-chatter-dock73/super-docs-web3/sdf", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668696, "uuid": "177a4d5a-fcdd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:41986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668880, "uuid": "8547681e-fcdd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.118:59997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769668881, "uuid": "861f9ad0-fcdd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.0.5:46269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769669842, "uuid": "c28d0335-fcdf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.169.216:58644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769670079, "uuid": "4fdbb8f0-fce0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.55.183:50910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769670432, "uuid": "22b56bcb-fce1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.154.84.204:35442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769671335, "uuid": "3ce7de36-fce3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.55.203:37213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769671634, "uuid": "eec2c4f5-fce3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:33028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769671688, "uuid": "0f17fdd4-fce4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.190.96:55159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769671749, "uuid": "3359cadd-fce4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.167.253:45699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769672418, "uuid": "c2507d93-fce5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:33028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769672592, "uuid": "2a0e3870-fce6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.55.203:37213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769673379, "uuid": "fef82b06-fce7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.167.253:45699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769673549, "uuid": "6420e537-fce8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.38.248:46541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769673790, "uuid": "f3e98f7c-fce8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.213.85:59684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769674112, "uuid": "b3d212fb-fce9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.83:45703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769674575, "uuid": "c8271dfb-fcea-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.150:51055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769674808, "uuid": "52e45234-fceb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.150:51055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769674809, "uuid": "5348b799-fceb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.106:33072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769676015, "uuid": "21f60c7e-fcee-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.163.48.188:49758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769676186, "uuid": "880486cd-fcee-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/grading-chatter-dock73/super-docs-web3/forward", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769676320, "uuid": "d803853d-fcee-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.102.255:50566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769676667, "uuid": "a71e6761-fcef-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.251:59477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769676668, "uuid": "a78f4413-fcef-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.102.255:50566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769676857, "uuid": "1849fc08-fcf0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.15.169:45300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677158, "uuid": "cbb90281-fcf0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.83:45703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677206, "uuid": "e8470643-fcf0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/eth", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677275, "uuid": "110a142e-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.163.48.188:49758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677276, "uuid": "11967faa-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.43:60630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677276, "uuid": "11a68be3-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.204:41814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677284, "uuid": "16570f01-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.133.245:54814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677337, "uuid": "367c411a-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.79.91:44062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677338, "uuid": "369d6153-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.75.249.58:42259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677397, "uuid": "59fa4770-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.219.155:58586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677397, "uuid": "5a20a697-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.28:35191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677397, "uuid": "5a2cccef-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.252.28:59688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677398, "uuid": "5a8a8791-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.61.61:48265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677398, "uuid": "5a90a071-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.134:42743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677401, "uuid": "5c7e5df9-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.32.206.70:8066/download/linux/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677515, "uuid": "a02fe712-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.251.69.12/changepk/wq&&tar", "Tag": [ { "name": "CastleRAT", "colour": "#095cff", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677516, "uuid": "a0c779e6-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.pdf-tool.com/install/last/lander/PDFToolsSetup.msi", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677517, "uuid": "a14e025a-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://get.anypdf.com/place/new/lander/anypdf.msi", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677542, "uuid": "b09f5f0b-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.vidconvert.io/installer/new/touchdown/Videodownloader.msi", "Tag": [ { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677691, "uuid": "093a7a16-fcf2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.106:33072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677692, "uuid": "09865378-fcf2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.212.199:47623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677692, "uuid": "09aa7ee0-fcf2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.53:58236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769677806, "uuid": "4de47336-fcf2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/cvx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769678119, "uuid": "086618dc-fcf3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.212.199:47623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679021, "uuid": "222fcc60-fcf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.53:58236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679187, "uuid": "850112bb-fcf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/var", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679273, "uuid": "b853be19-fcf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.17.179:43720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769679386, "uuid": "fb816aa3-fcf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.6:43897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680336, "uuid": "31b8eec2-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.95.224.182:42426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680523, "uuid": "a1729953-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0upx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680524, "uuid": "a18713f1-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0upppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680524, "uuid": "a191d8ec-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0uparm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680524, "uuid": "a1b11998-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0uparm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680525, "uuid": "a2893177-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0upx64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680525, "uuid": "a2a04f35-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0upmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680529, "uuid": "a5067032-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0upm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680529, "uuid": "a5102079-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0upmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680530, "uuid": "a5941249-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0upsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680535, "uuid": "a81aa017-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0uparm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680536, "uuid": "a8ddeee5-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0upspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680536, "uuid": "a9004c1e-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://basic1997.duckdns.org:8443/0uparm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680639, "uuid": "e6722f97-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0uparm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680639, "uuid": "e6768a0d-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0upmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "e79b3518-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0upx64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "e79eee37-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0upsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "e7a2d58f-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0upspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "e7af2fc5-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0uparm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "e7b04663-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0upx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "e7b0c641-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0uparm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680641, "uuid": "e7b39b5f-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0upm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680642, "uuid": "e7df502d-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0uparm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680642, "uuid": "e8183356-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0upppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680642, "uuid": "e81edaa6-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/0upmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680865, "uuid": "6cc15c55-fcf9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/zec", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769680940, "uuid": "99d8cb10-fcf9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:46887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769681121, "uuid": "05b109cc-fcfa-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.199.244:43020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769681475, "uuid": "d8be6428-fcfa-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.67:57007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769681531, "uuid": "fa4c99c5-fcfa-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.25:43070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769681957, "uuid": "f7afd63d-fcfb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.96.228.235:4985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682201, "uuid": "8979e6b2-fcfc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.226.5:43796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682311, "uuid": "caf597ba-fcfc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1781548144/y3GbU2Z.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682384, "uuid": "f68809ca-fcfc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.96.228.235:4985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769682849, "uuid": "0b751b1a-fcfe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.154.250:41350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683043, "uuid": "7f3cdb11-fcfe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.67:57007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683144, "uuid": "bb92fd28-fcfe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/bra", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683334, "uuid": "2c6d5820-fcff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.41.192:53174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683455, "uuid": "74a58acc-fcff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:46887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683566, "uuid": "b707cb41-fcff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/hex", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683626, "uuid": "daf6cda6-fcff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/804292253/Du1wwqK.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c1e5d24-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c1e64ad-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c1e6af1-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c21c528-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.arm8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c22c1af-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c22fae9-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.xtensa", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c2fbfc0-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c3331ae-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683816, "uuid": "4c3b75a4-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c4b7427-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c501b87-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c501d35-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c540524-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c543249-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c580a72-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c5a72bd-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.armv7v5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c69e3bd-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/aisuru.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4c8d4359-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:45096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683817, "uuid": "4cb83cc2-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:45096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683881, "uuid": "72ab24fe-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.252:45893/hoof/kitty.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769683998, "uuid": "b8ba426c-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.243.255:44327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684047, "uuid": "d5b6c2f1-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/tor", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684306, "uuid": "701f83ce-fd01-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.113.219:54499/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769684480, "uuid": "d7e3d735-fd01-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.154.250:41350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769685619, "uuid": "7e7f64b6-fd04-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:48507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769685667, "uuid": "9b43faa7-fd04-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/das", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769685788, "uuid": "e36a5c71-fd04-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.41.192:53174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769686626, "uuid": "d6a83a98-fd06-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/zr0", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769687182, "uuid": "226778d4-fd08-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:48507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769687839, "uuid": "aa06c3c5-fd09-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.21.222:60688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769687965, "uuid": "f4f662f4-fd09-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.131.92.150:48413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769688321, "uuid": "c908d6e7-fd0a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.24.127:34054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769688684, "uuid": "a14a658e-fd0b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.27.50:54382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769688684, "uuid": "a189e651-fd0b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.171.151:34324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769688929, "uuid": "33c48e43-fd0c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.100.255:37574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769688979, "uuid": "513382f8-fd0c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.213.215:36623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689105, "uuid": "9c86bcb0-fd0c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.131.92.150:48413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689764, "uuid": "2568951e-fd0e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.231.194:44588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769689934, "uuid": "8ac91793-fd0e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.24.127:34054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769690299, "uuid": "64663495-fd0f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.213.215:36623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769690537, "uuid": "f2079069-fd0f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.76.3:47684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769691080, "uuid": "359024e8-fd11-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.76.3:47684/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769691323, "uuid": "c676a183-fd11-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.34.108:33163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769691440, "uuid": "0c81ddd8-fd12-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.34.108:33163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693122, "uuid": "f67e4b81-fd15-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.198.81:41962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693287, "uuid": "593a95c3-fd16-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693295, "uuid": "5de83e07-fd16-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.226.137:54763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693416, "uuid": "a62823c5-fd16-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.178:37776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693650, "uuid": "31a71b9a-fd17-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.223.41:40285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693656, "uuid": "35096311-fd17-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.0.92:46670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693719, "uuid": "5a8d94c3-fd17-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.148:36718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769693968, "uuid": "eee6ee21-fd17-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:49771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769694129, "uuid": "4f1b32fe-fd18-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:39118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769694919, "uuid": "25b8f412-fd1a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.178:37776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769695086, "uuid": "89ac625f-fd1a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.148:36718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769695396, "uuid": "42788b02-fd1b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.126.20:50209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769695516, "uuid": "8983ba32-fd1b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.223.41:40285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769695996, "uuid": "a813067f-fd1c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.193.35:60330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769696542, "uuid": "ed745b18-fd1d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.113.51:46605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769696910, "uuid": "c8cf9e7c-fd1e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.193.35:60330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697028, "uuid": "0f069b02-fd1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.200.246.236/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697028, "uuid": "0f14392d-fd1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.200.246.236/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697028, "uuid": "0f28f2b8-fd1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.200.246.236/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697028, "uuid": "0f38d291-fd1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.200.246.236/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697029, "uuid": "0f4ed2b3-fd1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.200.246.236/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697388, "uuid": "e5648c58-fd1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.231.139.171:40752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697425, "uuid": "fbb5e971-fd1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/web3call/ws014/st85", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697615, "uuid": "6ce68f6b-fd20-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.231.139.171:40752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697729, "uuid": "b0b4f438-fd20-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.204:41814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769697920, "uuid": "22e60a24-fd21-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.72:36866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698027, "uuid": "629ad439-fd21-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.208.247:54197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698703, "uuid": "f52a32ff-fd22-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.171.107:53343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698869, "uuid": "5812eb1b-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.180.90:52296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698870, "uuid": "58c176f7-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.98.154:41029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698873, "uuid": "5ad4eacb-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.227.77:35771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698874, "uuid": "5af69ff5-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.75.248.215:45949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698874, "uuid": "5b12b63d-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:36219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698874, "uuid": "5b25021c-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.250/bins/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698874, "uuid": "5b784451-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.147.183:60315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698875, "uuid": "5b8fa849-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:60772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698937, "uuid": "80839bb2-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.arc", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698937, "uuid": "80d157e1-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.197.7:35479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698938, "uuid": "81634b3d-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.249.86:60568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698950, "uuid": "88568143-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.117.15:49048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698994, "uuid": "a2cdf787-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698995, "uuid": "a376b039-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.41.10:42945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698995, "uuid": "a3a7da8e-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.54.88.94:42713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769698996, "uuid": "a4141a62-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.112.152:48931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699049, "uuid": "c3af0d7f-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.49:45980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699050, "uuid": "c40a9991-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.56.244.89:5001/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699050, "uuid": "c4327efa-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.170:48128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699050, "uuid": "c438f726-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.155.46:38511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699059, "uuid": "c93fa139-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.77.143:45148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699118, "uuid": "eccd7d1d-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.39.33:37579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699479, "uuid": "c3e4ab2f-fd24-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.72:36866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699544, "uuid": "ea6a5bdc-fd24-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.19.190:49322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699588, "uuid": "0500f349-fd25-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.197.7:35479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699589, "uuid": "057d9205-fd25-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.187.163:34762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699781, "uuid": "77c7c6c7-fd25-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.87.216:42531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769699889, "uuid": "b8255c84-fd25-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.202.213:33128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769700091, "uuid": "30d34718-fd26-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.123:49689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769700316, "uuid": "b67541b7-fd26-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.188.87:36202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769700624, "uuid": "6e3111b3-fd27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.36.83.9:33084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769700796, "uuid": "d4d08855-fd27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.86.92:45077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769701388, "uuid": "359f70cd-fd29-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.87.216:42531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769701388, "uuid": "35a777ff-fd29-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.202.213:33128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769701818, "uuid": "35d684da-fd2a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.147.63:52958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769701993, "uuid": "9e62a544-fd2a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.210.163:55739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769702531, "uuid": "deb16e4f-fd2b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.147.63:52958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769702709, "uuid": "4960527b-fd2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.83.8:58272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769702956, "uuid": "dc8bf335-fd2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.188.87:36202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769703017, "uuid": "00f09440-fd2d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.3.105.59:41838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769703018, "uuid": "0168bdd5-fd2d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.213.85:59684/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769703378, "uuid": "d7d03fa3-fd2d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.210.163:55739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769703499, "uuid": "1ffe2eac-fd2e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.2.54:35066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769703803, "uuid": "d4e563cb-fd2e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.74.7:60951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704213, "uuid": "c9787bd9-fd2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.49:45980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704281, "uuid": "f229ead1-fd2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/pay", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704281, "uuid": "f229f57d-fd2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704281, "uuid": "f232568d-fd2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bin", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704409, "uuid": "3e8e34a8-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.74.7:60951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e95ac92d-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e95c339b-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e95c38fa-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e95e3807-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e95eb529-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e95ec44b-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e95f11fd-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e95f1434-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e963b11a-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704696, "uuid": "e995b1fc-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb1765b3-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb176805-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb1b41d5-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb226279-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb29232d-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb2932a1-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb2abeca-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb306032-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb30d0ac-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb329803-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb344882-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb347f4d-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb35db87-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb362987-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb47a5d6-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704699, "uuid": "eb49aa1f-fd30-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769704757, "uuid": "0d8368a8-fd31-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.120.29/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769705589, "uuid": "fd72dd4b-fd32-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.37:36893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769705783, "uuid": "7195db05-fd33-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.253.105:43498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "694f57a2-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "695dff4d-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "6960c6aa-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "6960d149-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "6963899b-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "696a1cbc-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "696d9fda-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "69748bf9-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "697beaec-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "69801db2-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706199, "uuid": "6982ac9e-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.105.136/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706367, "uuid": "cda7c9e6-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.119:42680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706367, "uuid": "cdb6450f-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.74.217:33774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706752, "uuid": "b2c2f3da-fd35-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.136.140:44294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769706978, "uuid": "395671a4-fd36-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.37:36893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707273, "uuid": "e9960fee-fd36-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:60556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707462, "uuid": "5a0a2add-fd37-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.62.55.143/Client-built.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769707699, "uuid": "e73dccb6-fd37-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:60556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708006, "uuid": "9e59d83f-fd38-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.253.105:43498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708182, "uuid": "077b787d-fd39-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.136.140:44294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708538, "uuid": "dbb006e8-fd39-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.133.122:45424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708662, "uuid": "2550ba09-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.62.48:41984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708707, "uuid": "3ff5e1f8-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.107.86.255/sostener.vbs", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708707, "uuid": "40092b83-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.107.86.255/andre.vbs", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708707, "uuid": "406ed839-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.107.86.255/actu.exe", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708708, "uuid": "408b192d-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.107.86.255/dllchichi.txt", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708708, "uuid": "409cf7c9-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.107.86.255/pichichi.txt", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708709, "uuid": "41984902-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.107.86.255/31agosto.vbs", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769708888, "uuid": "ac354132-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.83.239.106:27484/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769709377, "uuid": "cf4f9f2b-fd3b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.27.50:54382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710463, "uuid": "56e2df53-fd3e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.57.71:47226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710645, "uuid": "c32962f1-fd3e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.168.13:39472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769710819, "uuid": "2b3a6ef1-fd3f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7019456639/KNCV6E4.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769711120, "uuid": "deae03fc-fd3f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.25:43070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769711476, "uuid": "b272ab99-fd40-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.43.196:45624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769711770, "uuid": "61f1799a-fd41-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.59/cyber.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769711838, "uuid": "8a923bea-fd41-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.57.71:47226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769712426, "uuid": "e8cfe193-fd42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8536096438/FnkjqrY.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769712431, "uuid": "ebb3a05d-fd42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.168.13:39472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713042, "uuid": "58039b00-fd44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.43.196:45624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713640, "uuid": "bc8bc0b6-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.12:39563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713746, "uuid": "fb62d416-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.150.34.23/g2m.rar", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713746, "uuid": "fb79c80f-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.150.34.23/mess.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713747, "uuid": "fc505ea6-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.150.34.23/1.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713749, "uuid": "fd294f32-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.150.34.23/123.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713752, "uuid": "ff0f4fe7-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.150.34.23/style.css", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713752, "uuid": "ff660b78-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.150.34.23/Build123.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713869, "uuid": "4532e141-fd46-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.101.208:47819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769713878, "uuid": "4a7b117a-fd46-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.119.2:56466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769714231, "uuid": "1cdd286e-fd47-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.148.97:38022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769714433, "uuid": "95461255-fd47-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.199.67:60165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769715436, "uuid": "eb074177-fd49-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.223:56557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769716339, "uuid": "053f81c5-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.241:43864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769716397, "uuid": "27becdeb-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.79.114:59457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769716402, "uuid": "2a79c092-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.157.215:48003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769716640, "uuid": "b89d46c5-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.244/botpilled/rbot", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769716640, "uuid": "b89fd49c-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.11/ovh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769716640, "uuid": "b8b4e262-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.168/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769716640, "uuid": "b8b76827-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.168/huhu/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769716640, "uuid": "b8b77aad-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.168/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717526, "uuid": "c8e15ca2-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/o", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717528, "uuid": "c9c68a05-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.242/bins.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717528, "uuid": "c9d0e748-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/sex.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717528, "uuid": "c9d8c653-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "ca528128-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hqej69yf.v0xenharvest.ru/?=check&&actmn=gginqZEjvXeOaZxr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "ca71f909-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "ca7cb088-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "ca893405-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.mipsel-uclibc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717529, "uuid": "cac81634-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717530, "uuid": "cacc085d-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.101.171:51490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717530, "uuid": "cb312e41-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717530, "uuid": "cb5dd023-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717531, "uuid": "cbbd6545-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717532, "uuid": "cc45b9fe-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717533, "uuid": "ccd00c6d-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.132/bins/run.go", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717533, "uuid": "cd1d3095-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717534, "uuid": "cd4b2184-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.13/ovh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717535, "uuid": "ce112297-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:35554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717540, "uuid": "d0e240bd-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.168/all.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717543, "uuid": "d2f65f21-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/data.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717546, "uuid": "d491612b-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.241:43864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769717953, "uuid": "c768be46-fd4f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.79.114:59457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769718131, "uuid": "3109964b-fd50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.157.215:48003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769718606, "uuid": "4c311a04-fd51-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/tplink.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769718798, "uuid": "bea0f636-fd51-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.254.17:36682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769718933, "uuid": "0f730f5a-fd52-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.252.28:59688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769719446, "uuid": "40fd3d52-fd53-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6334661508/yWGDEta.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "xenorat", "colour": "#2f1141", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769719456, "uuid": "4737daa0-fd53-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.198.60:40626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769719582, "uuid": "91efde31-fd53-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.67.244:60727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769719636, "uuid": "b23d6f03-fd53-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.138.207:41230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720120, "uuid": "d293a53b-fd54-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.145.121:39326/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720307, "uuid": "4296b809-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.254.17:36682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720479, "uuid": "a8f900af-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:39153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720479, "uuid": "a8f901d2-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:36963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720479, "uuid": "a909f66e-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.74.217:33774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720479, "uuid": "a9156ca5-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.200.230:33418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720480, "uuid": "a94064ce-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.75:47507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720480, "uuid": "a940cc17-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.75:47507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720480, "uuid": "a9a19bf7-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.133.211.71:44784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720534, "uuid": "c9ad54f7-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.135.37:58463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720534, "uuid": "c9bb70f2-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.217.152:60822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720534, "uuid": "c9c0f0cf-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.35.53:60818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769720539, "uuid": "ccb0f437-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.9.82:44274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721133, "uuid": "2eedcd33-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.198.60:40626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721246, "uuid": "71c7ad2f-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.85/1.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721267, "uuid": "7e8eec83-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721267, "uuid": "7e9f52b0-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/co", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721267, "uuid": "7ec49193-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/dss", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721268, "uuid": "7ed93302-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/dc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721268, "uuid": "7ee8a26b-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721268, "uuid": "7efaf8ef-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721268, "uuid": "7f0d2c0b-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721268, "uuid": "7f1f81e4-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721268, "uuid": "7f30bbba-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.147/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721377, "uuid": "c0160822-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.85/johenlastgen/johen.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721377, "uuid": "c02bc530-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.85/johenlastgen/johen.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769721487, "uuid": "01772a26-fd58-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.145.121:39326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722028, "uuid": "43f2ce9a-fd59-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.177.118:38952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722028, "uuid": "43fd3e0c-fd59-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.138.207:41230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722213, "uuid": "b27489f3-fd59-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/garm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722213, "uuid": "b2748a1f-fd59-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/gmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722213, "uuid": "b2748bc8-fd59-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/gmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722511, "uuid": "641a548f-fd5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.190.71:36053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722566, "uuid": "84fa582a-fd5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8451971749/Wfo8KJM.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769722997, "uuid": "85b68a8a-fd5b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.61:54921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769723175, "uuid": "ef8cb636-fd5b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.190.71:36053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769723718, "uuid": "33a0b8a1-fd5d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.177.118:38952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769723718, "uuid": "33ae640e-fd5d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.13:47479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769724010, "uuid": "e1923826-fd5d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.138.12:38799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769724196, "uuid": "50156ed3-fd5e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.13:47479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769725514, "uuid": "61ed36c1-fd61-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.61:54921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769725625, "uuid": "a41ebe3d-fd61-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.106/f", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769725626, "uuid": "a4f08730-fd61-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.106/zerarm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769725627, "uuid": "a503b71b-fd61-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.106/zerarm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769725627, "uuid": "a5129957-fd61-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.106/zerarm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769726173, "uuid": "eb02587e-fd62-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.73:38279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727065, "uuid": "fe81d36f-fd64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/c.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727065, "uuid": "fe83cddf-fd64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22/file/w.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727616, "uuid": "46cd08e3-fd66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.179.89.92:53862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727616, "uuid": "47053344-fd66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.73:38279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727847, "uuid": "d0a3765d-fd66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.151/Clipper.exe", "Tag": [ { "name": "24x01x2026", "colour": "#8127e5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727914, "uuid": "f8678290-fd66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.151/zx.exe", "Tag": [ { "name": "24x01x2026", "colour": "#8127e5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769727966, "uuid": "1770517e-fd67-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.151/Loader.exe", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "zobpx", "colour": "#c91779", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769729232, "uuid": "0a499f7f-fd6a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.103.4:58064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769729303, "uuid": "344dfa00-fd6a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.80.226:39513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769730027, "uuid": "e396317a-fd6b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.25.35:48130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769730614, "uuid": "418aea6e-fd6d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.101.208:47819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769730675, "uuid": "66451f5e-fd6d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.31:57411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769731093, "uuid": "5f256926-fd6e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.103.4:58064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677384, "uuid": "525267d5-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.32.206.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769684284, "uuid": "62f3443b-fd01-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.113.219", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769653985, "uuid": "d720945d-fcba-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.194.152.180", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769662265, "uuid": "1e70abeb-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.71.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717524, "uuid": "c7c51710-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.80.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683806, "uuid": "45bf01b2-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.80.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699045, "uuid": "c0ef64ab-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.80.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769716325, "uuid": "fcaaf785-fd4b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.118.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654706, "uuid": "84f4bde9-fcbc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.12.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769658606, "uuid": "99cd0fb0-fcc5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.2.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769667245, "uuid": "b6a3534e-fcd9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.20.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654824, "uuid": "cba73265-fcbc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.21.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655665, "uuid": "c083df27-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.28.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677384, "uuid": "52527adb-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.30.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769649965, "uuid": "7b6db423-fcb1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.31.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680925, "uuid": "90d04dcd-fcf9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.45.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698865, "uuid": "55bd6df8-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.53.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646007, "uuid": "43dc2421-fca8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.54.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677684, "uuid": "05358ed9-fcf2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.67.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769723705, "uuid": "2bd90776-fd5d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.87.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769649365, "uuid": "156f89c5-fcb0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.92.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769660406, "uuid": "ca6c1db8-fcc9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.92.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677265, "uuid": "0b087381-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.96.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647625, "uuid": "085bb64e-fcac-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.198.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769662206, "uuid": "fb666828-fccd-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.118.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769690525, "uuid": "eb09fa6f-fd0f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.76.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677684, "uuid": "0535ba77-fcf2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.212.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769667186, "uuid": "93fd27d1-fcd9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.111.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769648344, "uuid": "b55091ce-fcad-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.26.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655665, "uuid": "c083cb39-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.227.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769691307, "uuid": "bcb8b161-fd11-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.34.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769729224, "uuid": "0565a848-fd6a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.103.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698985, "uuid": "9d573102-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.112.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677384, "uuid": "525230ed-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.145.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769720106, "uuid": "ca988454-fd54-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.145.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769676845, "uuid": "10a9430d-fcf0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.15.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769696525, "uuid": "e32b2777-fd1d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.113.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769720524, "uuid": "c3d50161-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.9.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769682845, "uuid": "08ee8b33-fcfe-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.154.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769659864, "uuid": "87b50feb-fcc8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.10.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769711464, "uuid": "ab3d0355-fd40-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.43.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769671324, "uuid": "366a6c11-fce3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.55.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655066, "uuid": "5b5b9593-fcbd-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.131.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698925, "uuid": "798f2c01-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.117.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769649365, "uuid": "156f8bcf-fcb0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.13.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769662206, "uuid": "fb667bf8-fccd-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.27.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769674084, "uuid": "a332aaf2-fce9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.29.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769656685, "uuid": "20a17843-fcc1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769644984, "uuid": "e2879559-fca5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.17.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769706725, "uuid": "a2a3bf4e-fd35-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.136.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769646065, "uuid": "667408a8-fca8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.141.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769679245, "uuid": "a7af6c45-fcf5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.17.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655725, "uuid": "e46c310c-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.165.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769697365, "uuid": "d7c84fee-fd1f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.231.139.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769703785, "uuid": "ca682281-fd2e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.74.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769659085, "uuid": "b729c96a-fcc6-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.184.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769695984, "uuid": "a0b3b1de-fd1c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.193.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699884, "uuid": "b5876ae2-fd25-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.202.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769700306, "uuid": "b0d7cd63-fd26-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.188.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769720465, "uuid": "a089353c-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.133.211.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713865, "uuid": "42825b5c-fd46-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.119.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769710624, "uuid": "b6e23eca-fd3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.168.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769693645, "uuid": "2e62d38b-fd17-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.223.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683325, "uuid": "272395a8-fcff-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.41.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677384, "uuid": "52528701-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.61.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769657705, "uuid": "80bca78a-fcc3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.10.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769674806, "uuid": "51770164-fceb-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.224.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769670065, "uuid": "47866dad-fce0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.55.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769720524, "uuid": "c3d51e8c-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.135.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698865, "uuid": "55bd5b71-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.197.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680325, "uuid": "2b6371aa-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.95.224.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769725624, "uuid": "a37658cf-fd61-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.180.106", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769716385, "uuid": "20a0a367-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.157.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769719444, "uuid": "40024fd4-fd53-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.198.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769714405, "uuid": "848e591a-fd47-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.199.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769718785, "uuid": "b6d72dc8-fd51-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.254.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769665984, "uuid": "c7400ea0-fcd6-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.142.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717524, "uuid": "c7c5ab4c-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.54.242", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698685, "uuid": "ea5e8503-fd22-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.171.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769662324, "uuid": "41d5c767-fcce-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.81.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677265, "uuid": "0b08b01d-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.204.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769720524, "uuid": "c3d5320a-fd55-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.35.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769693405, "uuid": "9f6fcc3e-fd16-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.69.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769701805, "uuid": "2dff1ca0-fd2a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.147.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769651644, "uuid": "6430e646-fcb5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.216.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769667365, "uuid": "fe24929f-fcd9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.0.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769656685, "uuid": "20a18e2f-fcc1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.227.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708705, "uuid": "3edf22e9-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "191.107.86.255", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717524, "uuid": "c7c46ca3-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.147", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769716625, "uuid": "af85eb1b-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.168", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769716625, "uuid": "af85e37c-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.244", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655665, "uuid": "c083eb1a-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769707446, "uuid": "50874f83-fd37-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.62.55.143", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699045, "uuid": "c0ef70de-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.56.244.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769716625, "uuid": "af863975-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.123.145.11", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769716625, "uuid": "af86dd64-fd4c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.123.145.13", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655665, "uuid": "c0839e2a-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.200.246.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708524, "uuid": "d3519589-fd39-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.133.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717524, "uuid": "c7c49ecb-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.101.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769708884, "uuid": "a9e07c3c-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.83.239.106", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769644924, "uuid": "bebedadd-fca5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.255.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769660585, "uuid": "35644f1a-fcca-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.107.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769700785, "uuid": "ce25ab53-fd27-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.86.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654225, "uuid": "66357e4f-fcbb-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.3.105.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769654525, "uuid": "18fc3c27-fcbc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.43.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769714224, "uuid": "18ba6b36-fd47-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.148.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699585, "uuid": "02d2f606-fd25-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.187.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769673785, "uuid": "f1104f72-fce8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.213.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713865, "uuid": "4282a642-fd46-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.213.101.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769730665, "uuid": "6000005f-fd6d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.120.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769730005, "uuid": "d6a6f787-fd6b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.25.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769681946, "uuid": "f188ae54-fcfb-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.96.228.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769693285, "uuid": "581f7e40-fd16-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.56.120.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769695385, "uuid": "3b6ceec5-fd1b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.187.126.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769700605, "uuid": "62b5fbdf-fd27-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.36.83.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655665, "uuid": "c07fd278-fcbe-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.75.248.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677324, "uuid": "2e9572fc-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.75.249.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769647744, "uuid": "4fac298b-fcac-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.98.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769665325, "uuid": "3e503b83-fcd5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.145.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769669825, "uuid": "b87ed05a-fcdf-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.169.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677384, "uuid": "52528c56-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.252.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699045, "uuid": "c0ef7b93-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.155.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769697906, "uuid": "1a6828c1-fd21-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.244.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769664185, "uuid": "97272443-fcd2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.226.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699765, "uuid": "6e602442-fd25-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.87.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698865, "uuid": "55bea786-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.147.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655784, "uuid": "07d814ac-fcbf-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.134.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769722505, "uuid": "60948f39-fd5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.190.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769699525, "uuid": "df3c6cbb-fd24-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.19.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769693645, "uuid": "2e629df5-fd17-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.0.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655245, "uuid": "c62ffa13-fcbd-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.24.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769693285, "uuid": "581f5e43-fd16-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.226.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769688666, "uuid": "96e72e5d-fd0b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.171.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769713744, "uuid": "fa5f4cf7-fd45-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.150.34.23", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769721244, "uuid": "70e9d08d-fd57-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.153.34.85", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769676306, "uuid": "cfdfc740-fcee-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.102.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769729284, "uuid": "292a8edb-fd6a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.80.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769683985, "uuid": "b0b43f85-fd00-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.243.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769651044, "uuid": "fe108806-fcb3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769652306, "uuid": "ee93f5e4-fcb6-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.62.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769700065, "uuid": "21061926-fd26-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769649787, "uuid": "10fef1bf-fcb1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.199.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769727606, "uuid": "40b7706f-fd66-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.179.89.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769655006, "uuid": "37f9d3d6-fcbd-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.20.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769698865, "uuid": "55bea5e5-fd23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.98.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769711765, "uuid": "5ed07cf5-fd41-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.83.39.59", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769706184, "uuid": "607e41a6-fd34-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.105.136", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677506, "uuid": "9aee460c-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.251.69.12", "Tag": [ { "name": "CastleRAT", "colour": "#095cff", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769680508, "uuid": "98848747-fcf8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "basic1997.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677510, "uuid": "9d87f0fb-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dl.vidconvert.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677506, "uuid": "9b011a67-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "download.pdf-tool.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769677506, "uuid": "9b0da3b3-fcf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "get.anypdf.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769717526, "uuid": "c8a90d76-fd4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hqej69yf.v0xenharvest.ru" } ] } }