{ "Event": { "published": true, "date": "2024-06-18", "threat_level_id": 2, "info": "URLhaus IOCs for 2024-06-18", "timestamp": 1718755391, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "a5533bfa-4887-42ac-9378-dd84907e7c6a", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1718671508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671508, "uuid": "6b10a19e-3111-4325-a598-0ef431d64007", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671508, "uuid": "e4f825d9-1d73-469b-b653-2a03b2036f00", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671508, "uuid": "82b13215-b611-4256-b010-ae4ef6485cbe", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671508, "uuid": "8c986eb4-fbdd-408b-9d55-a862c30c38a0", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718671508, "uuid": "97e44434-20c5-481d-b2ac-85397fd15c3c", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5930c21b-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718720519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720519, "uuid": "3ed8cf55-681a-4e8e-91de-67df07a6be46", "comment": "Malware payload", "value": "da2d0cbe08c88db14a1798bcb6cb1087", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720519, "uuid": "e9682299-0164-4f8a-96be-f3a1b40c5a89", "comment": "Malware payload", "value": "45b55afb003c5a6195b3ff30480954b42a8f19813751e1a6089b72f91f036ebd", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720519, "uuid": "d12e8fb2-97d1-4fc6-8d4e-a4095df5fe94", "value": "706312E02BB5178C1276E8393ADD306F8124622F379A29241DD791CEF85B603A573DBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720519, "uuid": "b8b71bd3-827b-47f3-b44e-9d24e55afa4b", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjY:8D+CAXFYQChaAUk5ljnQssE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718720519, "uuid": "56801c01-9816-4336-a0ab-eac6c26e3fe2", "value": 71540, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5b6fe4-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718751077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751077, "uuid": "8c6c4ec0-1ea9-44ca-ac51-f8854ebbda45", "comment": "Malware payload", "value": "316b10940653b65ccadb5c0dca88b921", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751077, "uuid": "d2d69599-3b5d-4ed9-802e-c71bd0564ace", "comment": "Malware payload", "value": "6b09183fdd3eb3af13a88f61d0534bfb15a3fd30c2129ad51f51a7359ea7b1d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751077, "uuid": "21447d74-753d-4ef8-82c6-0ebdb49aed3e", "value": "1C831229135524E5D62280F1D7FD1F84AE591F698EE2EC15BC12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751077, "uuid": "aca1c1f9-7caa-4aa7-8661-0f33a8dd32cc", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uB:yYI0ARqw1qAEv7UIFM8oJorFquyjkRk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718751077, "uuid": "4e9e5f82-32ec-46a9-a1db-786edeb3ecca", "value": 82536, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718677833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677833, "uuid": "d2d34d97-0355-4952-8f31-9a87c757fd42", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677833, "uuid": "8d9dafa0-da4f-4691-9635-ae8a7f376008", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677833, "uuid": "5881717f-f700-43f0-ab1b-2cb31d96d5c7", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677833, "uuid": "8a8f6528-d812-485b-9849-59d981e2f0b7", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718677833, "uuid": "63f09637-069c-4e6b-9919-34055cddb336", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718676988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676988, "uuid": "b2f98cff-6ea8-418a-bbe2-b878121016d1", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676988, "uuid": "ce193acb-46f7-4ce3-9e12-6876bfea5f6d", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676988, "uuid": "990e4e3f-d392-4204-82c6-8bd260808383", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676988, "uuid": "c9a09aa4-f109-4215-bde1-da90175ff4f9", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718676988, "uuid": "e3c6d2d9-304b-446f-a777-7cdb41601618", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "449d013f-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718712920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712920, "uuid": "f21a2315-c8c3-48dc-98f1-8a008357af58", "comment": "Malware payload", "value": "454c9bf6bdfaf41e58406b098e236dc8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712920, "uuid": "b8c1fd71-4fc1-47e7-b913-f5ec65e424e7", "comment": "Malware payload", "value": "c0b1ac2a4e9df27794b10c8738057ba5476357bd5129bee50a2a1ab9f8183853", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712920, "uuid": "1bd179de-41ac-48f5-9bcf-1065f0561c03", "value": "EB531202339A297192714AF1E7FDBB48E64E3D588FF16C246C113D68F93239D5CC8909", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712920, "uuid": "6129fa96-0957-4612-b9c9-a36d1508619d", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxI:yYI0ARqw1qAEv7UIFM8oJorFquyj9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718712920, "uuid": "9f3289b0-fd12-4231-8504-2699ac6493bc", "value": 66608, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718692417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692417, "uuid": "57e4a5ea-ccc1-45b1-b757-20ce7b684ad3", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692417, "uuid": "7216a0d1-020a-4b79-a540-7c29d0a76b57", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692417, "uuid": "d04a3af3-56e5-4720-8702-b69dc2b68220", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692417, "uuid": "ea5e21e2-41e5-47fa-bb9e-e122be0d49bb", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692417, "uuid": "30fdef66-925a-4f70-8764-05ed9133e460", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16289159-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718673129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673129, "uuid": "36210280-c4fd-4785-bcd5-0e91a106c622", "comment": "Malware payload", "value": "aa5fde36cb0e26ac7973b0d983884490", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673129, "uuid": "1f680f6e-ccf4-4546-9941-95112af92075", "comment": "Malware payload", "value": "69ac6c1019c3f7133eb97a21b174ba9e40dea7c36a52170a5a8353d28bdffab0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673129, "uuid": "ca6a5821-e2ce-4485-bf33-28d295198653", "value": "E703028632953F73D51148F4E7FCAFCA714ABD54EFAA142FA8113A15B07235D24C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673129, "uuid": "c3511223-c3d8-488b-b04d-c58ed7f74d66", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTo:yYI0ARqw1qAEW67UIWi7M8gmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718673129, "uuid": "285aae33-8ca2-43de-986a-969aaedd6d36", "value": 40544, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718735273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735273, "uuid": "6dfab9db-cb06-4c33-a8db-c3d03d66ba39", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735273, "uuid": "c9546205-5e67-427c-b607-03a9f832f46d", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735273, "uuid": "3b6e159b-cc80-471e-9de6-67c0657f3306", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735273, "uuid": "d625b941-c383-483e-b044-4bbb55ea41a3", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718735273, "uuid": "2dff7dda-008c-49aa-95e9-29f8dab42153", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718691181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691181, "uuid": "8dbd1588-7cc0-44e1-95b9-2fe32c2f2232", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691181, "uuid": "09610a30-e3cb-44a5-8b85-1cac7c3b7924", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691181, "uuid": "1b94cbd2-a088-440d-9b47-0227693ecd76", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691181, "uuid": "1898fd7b-414c-48a9-a1d5-0a8cb48c838e", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718691181, "uuid": "49a5a936-1a12-4d84-8356-93cdb23ca3fd", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718685471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685471, "uuid": "7151ca97-7597-4649-ab05-baf14ba28add", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685471, "uuid": "8df7c920-5918-479b-9827-a5d56643a977", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685471, "uuid": "10a75783-de0b-4ac2-93d0-216dff3b4578", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685471, "uuid": "4e51ceb4-3586-4134-9a64-2fb503f3bb26", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718685471, "uuid": "8770d9b4-8e54-4ed0-b02a-4e5730ee68cc", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16aad771-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718686479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686479, "uuid": "a1613c4a-d753-440d-9af2-370142991557", "comment": "Malware payload", "value": "e739dc29e48462e4bee88c21474e51a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686479, "uuid": "19492f08-b5ec-4cbe-a817-9e728d72a303", "comment": "Malware payload", "value": "56ed019e39933567056a99aa4822422af73d09886158c6aca16082388494d2f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686479, "uuid": "64e86251-ed0b-44e3-956d-6f7c2d0ba25f", "value": "D9F2024633943B73E16255F4E3BDAFCA601E7D64DFEE202BA4413A2270B311D688D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686479, "uuid": "40d23f61-9c45-40f7-bb87-87f1d7e3aa0e", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8g:yYI0ARqw1qAEW67UIWi7M8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718686479, "uuid": "ebb8a6a2-b9a1-44e2-93e8-d1f4aead42fd", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19258105-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718685222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685222, "uuid": "6377d937-d1b4-452e-b3de-9199b1090a96", "comment": "Malware payload", "value": "f860c4318ab1cfd43fafd24f99c176cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685222, "uuid": "a670d717-51be-4d52-ab55-0ceb0d2fdffb", "comment": "Malware payload", "value": "d8430372204682e98e75cdf589ab45e2f09960cd0aff5af741341671481b3656", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685222, "uuid": "152e6939-8969-4740-95df-cfda4121815b", "value": "5972E18A2EAC3B07F4B296F2F33C7E58F3052E9D76679817D199712350A301AA114C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685222, "uuid": "726904a2-3e2f-46fd-97bc-39200ad1862b", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcn:YTYIDfYG6ZmewZ59+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718685222, "uuid": "c6599a59-afb7-4d3b-a804-d0a023f12c2c", "value": 17376, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1934a4c0-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718677894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677894, "uuid": "67fb7c97-f6b6-4e22-ac98-b464c5a2a6f7", "comment": "Malware payload", "value": "1ff5a92a793b1503e1399bf2434ac5c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677894, "uuid": "5d917f12-2177-4825-9129-400fa2eceb4b", "comment": "Malware payload", "value": "22eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677894, "uuid": "e5cefc26-b1d8-4f4f-8f51-2896fc779d05", "value": "2213028237A53F72D52188F4D7BCEFCA614A7D94AFA9181BAC123698747135C28C981F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677894, "uuid": "45eabd67-e80a-4ddd-83c6-e5e258753923", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsD9:yYI0ARqw1qAEW67UIWi7M8gmf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718677894, "uuid": "0b6fbf7d-efb0-4c38-b9bb-f496caa5b57e", "value": 44888, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d9d46e-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718729897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729897, "uuid": "27e90d60-a6df-4947-8c0b-a94494387142", "comment": "Malware payload", "value": "195e35ce0fad619aef8c8c638f981467", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729897, "uuid": "186a6be7-cea1-480b-a2fe-c846799b5acb", "comment": "Malware payload", "value": "d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729897, "uuid": "693bb404-2334-4b60-be92-6d3abe8f78b4", "value": "A313028336953F73D1218CF4D7FCEFCAA14A7D94AFD9141BA8113A99B07135C28C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729897, "uuid": "23612d34-fc54-4fef-b2e6-454b11e17fe1", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEK:yYI0ARqw1qAEW67UIWi7M8gmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718729897, "uuid": "5cf25215-e48a-4b6f-9ebd-12e8944866ef", "value": 43440, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718676873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676873, "uuid": "66549aa3-b619-405c-9368-8e92aa7f6c09", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676873, "uuid": "792fc92b-6dad-4e1f-ae13-9aaad00b1238", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676873, "uuid": "ffccc190-16f9-49c5-a5b1-0082022a9777", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676873, "uuid": "793bab92-2a91-4073-9596-632da058acae", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718676873, "uuid": "66bb0861-edc4-486d-85aa-62c19d3f58f4", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1718669587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669587, "uuid": "5c21abda-c35f-42e8-8751-f4711c13aac2", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669587, "uuid": "3318a367-e396-40ff-be38-c319e21e08f4", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669587, "uuid": "69d7ddd9-7fcc-493c-9b3e-bbc25aa61a24", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669587, "uuid": "5d97d48c-7c14-4c84-b3c7-af9ffcfe77c8", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718669587, "uuid": "c39dd2c7-89c8-481a-aae9-ddb73e68475e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718752154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752154, "uuid": "94aabe1e-6876-4aab-be1c-d9acfe8a10f7", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752154, "uuid": "77615ae2-5008-45d8-82a4-b9dacedbf225", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752154, "uuid": "441b4288-4abd-4c97-8ed9-e5bf82ec141f", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752154, "uuid": "6d372036-d1b5-46be-ab3a-490608cdcb1a", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718752154, "uuid": "c1a55728-dfe6-42f7-96a8-0d6bab9afc3d", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718669285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669285, "uuid": "280e86cc-799a-471f-a8dc-7b7b86f3ea81", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669285, "uuid": "31fe7f21-a495-4122-8693-75af3b05b99b", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669285, "uuid": "1adeab20-003a-4e61-968c-318b1ff82c89", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669285, "uuid": "9fe89f15-e81c-4b71-ad7c-0a49b7c58959", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718669285, "uuid": "386fcd71-5592-4ed3-bb6b-bbde3ebff808", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1718685133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685133, "uuid": "2ebe05fe-f16c-4406-abfc-e89a2212e1bc", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685133, "uuid": "b6e48321-9fcd-4762-a9b5-fae1a5043620", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685133, "uuid": "1346f85b-1efc-453e-bc25-685279dde9e9", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685133, "uuid": "a3526796-163d-497a-8233-8b9884f5a73a", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718685133, "uuid": "ad0b2d0d-5661-450f-9f1b-4dde78cb1d34", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1718673245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673245, "uuid": "950eb01d-402f-4305-86d6-d37899af152e", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673245, "uuid": "ebacb7da-2cd4-4cb4-b106-800952ef7889", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673245, "uuid": "aa7b1dbd-e55d-495c-a9da-000c50e94289", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673245, "uuid": "e5b96bc4-7fca-48aa-9f0a-e4b42a30e763", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718673245, "uuid": "1e0780d1-077d-4595-915e-3db579771162", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c1ca837-aec4-11ec-b287-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1718724589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724589, "uuid": "36b3a93d-cbe5-4eca-83aa-889ac00f5517", "comment": "Malware payload", "value": "27a14df2e7ae082c5ac993dbfb7a7723", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724589, "uuid": "20194958-0501-4d50-b627-2f2f8613d120", "comment": "Malware payload", "value": "36629f0e810abf7800ca382e6e643b2e3870cb941737d17bb5feb65624b75cac", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724589, "uuid": "11c07989-8728-425f-bd27-59d87627ba2b", "value": "T183C3124AEF369C0ECB402DB626DB5B8E9C6E7A5B41CBF4A8B9C1C18F17901CD79521", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724589, "uuid": "a31e613a-db80-4721-a39e-b7395168105a", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ1L:p3lOYoaja8xzx/0wsxzL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718724589, "uuid": "4057510f-8200-4219-835d-7660e1e0b233", "value": 127424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724589, "uuid": "bea750ed-1338-4c48-bf04-1e4cb39e8c30", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "967846f0-af98-11ec-b287-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1718674444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674444, "uuid": "b4c143b7-344f-49d7-b8ab-c172d7c8be20", "comment": "Malware payload", "value": "b1c198e9215eddd41390003aba9c0b6a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674444, "uuid": "0729ab4e-20d4-49d8-af71-66acc89cfb0c", "comment": "Malware payload", "value": "3a63d3b7432d806cf40fe764265219243b397b0748d02f6093f988c161a51d31", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674444, "uuid": "5ce34772-7499-4459-b16f-044ef55094fe", "value": "T16AC3124AEF329C1ADF402DB22ADB5E8E9C2D7A5B41CBF4A8B8C1D18F47901CD79521", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674444, "uuid": "e2a4f1d7-c338-4753-b40d-4428bb2b3b2f", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ1W:p3lOYoaja8xzx/0wsxzW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718674444, "uuid": "5d21efbc-0aa2-4a07-b862-f32e2c3e2bb8", "value": 125976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674444, "uuid": "56dab52b-fa29-4068-a7bb-513a88f063e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3781f32c-b440-11ec-b287-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1718671246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671246, "uuid": "3d8c79c7-4f8d-4006-884b-e176757a52f0", "comment": "Malware payload", "value": "dec206c86019dead8f1129694848c173", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671246, "uuid": "22efcaf2-ad3c-49a1-a68b-9f036bc61ab3", "comment": "Malware payload", "value": "122d5a734cac70d4c2c6c562ccefbdb1086bfc149a81e437e8ec1475e37977d0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671246, "uuid": "6e7b2e72-d7c3-41fe-8f8e-7db99ddcabbb", "value": "T11EC3124AFF329C1ACF402DB22ADB5A8E9C2D7A5B41DBF4A878C5C18F47901CD7A522", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671246, "uuid": "96f29d16-146e-4b84-8c76-28fa875526e5", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ1R:p3lOYoaja8xzx/0wsxzR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718671246, "uuid": "044e7280-0229-4b85-bdd8-7d5951e1a5e5", "value": 124528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671246, "uuid": "f1d07244-58ea-47e4-9801-f7be7e7346eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fd205ab-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "1a969519-55d5-49a6-9f23-3c7ddc73ad4b", "comment": "Malware payload (PureLogStealer)", "value": "794a7bc49c07d085d9e3cd15515f961d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "trojan.acll", "colour": "#a57033", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "8736ed99-6cd7-4c16-8954-b18f22daa3c4", "comment": "Malware payload (PureLogStealer)", "value": "3ba0f4f8645247e4f440e38ca2b0f91bed5d239452e97054e75e25d371ec4d98", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "trojan.acll", "colour": "#a57033", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "f687fe65-7d71-4203-a453-87de0a90fc2c", "value": "T16C94233E93E95A29F00F877266130B96E0109616721646233E9D3D60FEF91BBA7471", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "3c2ad69a-1114-48d6-8f36-c999c24ee70e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "648dc886-d5f2-4505-85c1-ca2f528cb62c", "value": "6144:2/VRn8YJDOU6q7Fb3Y/Fuss5RMExwzXvgHRsE14miEHB9TTavJKvKCz3Pw51VLqj:UDRDOO3mixwz4HRWEHLTTFCCz34DVsz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "49e9b967-a3bb-49d1-b93b-501771b460bf", "value": 445440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "de3986e9-1f73-45a6-b105-76f73e73cf32", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a48b2265-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718730556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "a2a2ac89-e9b7-4327-9f03-82032fd63201", "comment": "Malware payload (PureLogStealer)", "value": "461e951ba79964b681e9a8bc9d61a92c", "object_relation": "md5", "Tag": [ { "name": "celestybinder", "colour": "#a12368", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "4b1e8e19-d41b-4e3f-8b4e-d7e50f8a36e8", "comment": "Malware payload (PureLogStealer)", "value": "de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f", "object_relation": "sha256", "Tag": [ { "name": "celestybinder", "colour": "#a12368", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "950b387f-7a02-4c50-99ce-06e66fa7c373", "value": "T1E046BE10FA49CC76E81244BD816D3D4E9364ECF83B5914CF63847E5E2ABABE538335", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "7ebf5bad-f1c9-4f5e-a01c-22230f850bba", "value": "7f379848125893f6a5658e249931398d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "6b263190-2c65-458e-8f0c-f091feae8f6d", "value": "98304:28DaacSl8Gb4CieDNDQfCmzgHCS5nidPDjJ4zfm4xrXEkuJTQS383:28eacSl8Gb4CieDNDcCoynQPDyZxcTr3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730556, "uuid": "1d720abd-77bd-4d4a-acf3-9a5cb5e60ebb", "value": 5737472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "8b4d2a89-8b9b-4ca5-b5e5-398235fbee39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4db023d-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1718730550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730550, "uuid": "8ede467d-0a7e-43cb-97e1-0ee7f895446c", "comment": "Malware payload (VenomRAT)", "value": "26125c571d6225959832f37f9ac4629a", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "purlogstealer", "colour": "#9a4323", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730550, "uuid": "1a1bfcec-71ea-419b-aedf-2339c990179a", "comment": "Malware payload (VenomRAT)", "value": "94fada921a79c422e6dbf75eeca7429690d75901b5ef982a44874971b38708a0", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "purlogstealer", "colour": "#9a4323", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730550, "uuid": "c38f5cc6-5dfe-4f85-9201-320772ed3dcf", "value": "T167734A003BD88D26F2AE47B9BCF162070EF4D55B2416CE9E3CC454DE5B66BC589036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730550, "uuid": "c30abc28-6ca8-4be3-bb4f-d6745bd9a5cb", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730550, "uuid": "9748cd18-cdad-48b8-928c-2c37b2baa135", "value": "1536:CSUEkcxNYungvHZDJ/SkXizIqksbLvPMw6/eqmmRhdWVH1bfbv3SrwzUQbVclN:CSUxcxNYungPZDJ/SkXizIqks/vPMwZq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730550, "uuid": "3d04c86f-94d2-432f-9943-653a5648ccd1", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730550, "uuid": "a9ab6585-2be7-4e73-8481-2bed34919273", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c56b7458-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718730555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "34f9b88c-eaf9-4210-9df8-96bec2f37c2c", "comment": "Malware payload (PureLogStealer)", "value": "46fc9e5e1fbeed55281cd5f25310f8d3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "purlogstealer", "colour": "#9a4323", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "4b2865f9-e9eb-4cf1-8459-5bf1059f25d6", "comment": "Malware payload (PureLogStealer)", "value": "0494a21fd6ec0405206dbe6c82525b895f09ff4c240a301e1baae682c5ad80a2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "purlogstealer", "colour": "#9a4323", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "1508ca0a-b5b9-4516-9e7b-616f16217de7", "value": "T1569423B21E1186D3E55A8A35EF2C0360394D9FC9C12EE44CBFBED6DB4AD361241297", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "df889def-f7a8-4639-af66-500a551a8d45", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "77465b49-e0a4-460b-94c0-4d026633439f", "value": "12288:69mK3fATidVQFTply79bBf1LlWpQV1Hc47OWLT9L1g9jGH:69mKPAT8bBVlWpA11lu9c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730555, "uuid": "64345021-a1a1-497b-b381-ff875bb6a6eb", "value": 446464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "c20cb96d-7943-4a50-b72f-5ac9248be7d3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8303af7-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "0ce1f950-a4b9-4288-b000-a4963d9b3b38", "comment": "Malware payload", "value": "7aad5e78aa5e3c4c1fd5da339379185e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "ee6766c7-4d42-479d-a57c-3091157f94f1", "comment": "Malware payload", "value": "190d6e71962c2fb06d954fc87c750734da772cd9abf9281789a55d7f202868f6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "6f127581-f37b-4307-a7ae-96d818af4121", "value": "T17F11D0657CFF5129D961A160BC1D6E05A14352DE104C82BB37D8201E2A5A34DB2FCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "3d3eef57-6f23-4ee9-9316-434f9ce9871f", "value": "24:vB9+G1aUu+1U1XDE5/XD7M95aMuUHu8A38piVIaHIaDJVI7Iz+D83/u8D:3haUfU1gdM9l/OApiXpJSb83WC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730556, "uuid": "e6d8abd3-4bbf-46f6-ae2e-7844e62fa6da", "value": 1084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "36ee2622-9c2b-49d0-b87a-5da84c1dee8f", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e843d64d-175e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "6f373b87-5733-4590-9434-a46e0ffc5854", "comment": "Malware payload", "value": "d7611fe03255e5bd4875b2840641a27a", "object_relation": "md5", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "6a58af23-3846-4a17-9a24-93f29140ea8a", "comment": "Malware payload", "value": "5b90c6d36dd9147c16504351c20d7e5de5842b9dac2f8e57a9e4b525521f01b6", "object_relation": "sha256", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "cee2a0e6-cd15-4c8d-8d8d-87a6f5d43ef1", "value": "T175213D164C0B42263A76C4708A102208F15BF383B91888E3F23638914E6B64ACFEED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "e4457a9b-dd04-4351-b702-ed6ff73523bd", "value": "24:JpzHObI8hpJsyb20BHVmuhe/9u16vpDfYw1RpDa1vGgq8L:JpOI8nhAHlqSYwg0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730548, "uuid": "9544d026-ac75-4652-b60f-ead7e15abd1d", "value": 1200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "d182761c-b283-4f85-84f9-36bbe11feb03", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26407b49-1ce8-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "f2195d09-5d26-4001-9de9-3d79d207faad", "comment": "Malware payload", "value": "34961215950869251baa1879d161a90d", "object_relation": "md5", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "4583cee7-f99e-4ddb-a418-1dfd4a5f2120", "comment": "Malware payload", "value": "360507179fd7378dc3d0a2743ef1ddeb14d77295d1ac09fe5a208120718e4868", "object_relation": "sha256", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "380fd3ce-f9d1-4880-a819-873b46dcff64", "value": "T12701902F5150210A4D39C4741A290B84B04FE6C5C1504EC77A3D6C715C1F41D87EDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "875e5cd2-8918-4d2b-b7e6-65a8da6b368a", "value": "12:/8866bYIg2t88MeMQ7huU99Jwztps8JmpDvawpis8Jmp1Gyu1i76+s8wYj85KwHi:/k8Yrmme/9uC/wpIpDvawpNp1Jee6dYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730556, "uuid": "85696bab-22de-4156-99d9-fada00315dd9", "value": 750, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "816cdd8e-f68e-440c-a9a5-bcf8cb945ed9", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "265d1b48-1ce8-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "f3cf5f90-8e0d-4c52-93ba-3a22e65f145e", "comment": "Malware payload", "value": "0442d6dba4e1fa21723042e6e5d8f254", "object_relation": "md5", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "215c934b-38b7-4d7f-bdad-747f480aeb57", "comment": "Malware payload", "value": "930616041832b0f5b7392a31ae5ff19b205ddec219c9b111b2f9f15ea69bd4a8", "object_relation": "sha256", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "d794382d-cd4c-4ae5-b67b-832aa7212909", "value": "T10BF0787B9216292E5F39C8183A390F49744FE5C5D01466D77A281D972D8B06C83EDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "e01b44b4-0b20-450e-93ef-649402fe5998", "value": "12:E3H88OzM6bYIg2Xh88MeMQ7huUgnUs8JmpDdytmfs8Jmp1RKyt2yeUe8eKTbAl9D:E3HOM8YrMhme/9uTbpDEPp1DfNGK8D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730548, "uuid": "34fb6812-6720-47d2-90a3-8cc464ffc24b", "value": 606, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "ede59981-b7a6-4f6b-a3aa-1ed18a4d752f", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b32e9bd-2741-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718718245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718245, "uuid": "51b6df60-e57c-406c-9278-9fca19a1186a", "comment": "Malware payload (Mirai)", "value": "ba28069faf2b9dbb4345c5db40ede71f", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718245, "uuid": "5ddf066e-1c17-41f1-aa83-64ae33034f96", "comment": "Malware payload (Mirai)", "value": "6845e34952a416113dbc6fbffae8245d708c9bab6dc801c16f34a84744a3b7cc", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718245, "uuid": "63b98d09-08ff-482b-8cce-9974c693caad", "value": "T16E530267A6319C07EE85F63B415D78954479FBD83A2C15ACEC6411D427CBF3F22C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718245, "uuid": "0f9a88f8-cab3-4920-8144-9d8303897c12", "value": "1536:mWFZrbi9iXq+SlHplLEs7Lgs6oK+o6qL2tY:DT3l6lflLEs7hxKEe2tY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718718245, "uuid": "519fb473-f83f-4020-af5c-7b596c41a945", "value": 63212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718245, "uuid": "5112c300-09ae-403c-8b10-3e8a2a6726b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718245, "uuid": "1c21d027-6ec6-428c-8e10-596ecb5583ef", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af3d5099-2ab3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718742525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742525, "uuid": "90533901-2993-4df5-b315-8acc4e1cfe36", "comment": "Malware payload", "value": "40092c74f8088072bd611d339cac5417", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742525, "uuid": "b9d4fa4f-67c3-4e6a-9e73-f48a9cfca381", "comment": "Malware payload", "value": "376e55fb475cdb496f46f8a7457af4bbe082c1697504e5af2b21175d01a2908e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742525, "uuid": "a8c69f21-c637-4f7c-91da-3bc1fb58a7b0", "value": "T1DA431985BD92EA06CAE4137BFA0F42CD37266398E2DE3203DD256F55378B52B0D6B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742525, "uuid": "d7356ac2-a3a3-46c2-863a-7318c2ec5d3a", "value": "768:eXCJ5CLOvCSMq/DF5LzZ8YOfq9mMTdmnnzgwZSdgS+l0+llEocLWVN3UVA68ENXZ:4l6vdVVyq4DpZctZ+llLcL4dUJ8M71", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718742525, "uuid": "05b3632a-00af-4433-8a1b-54f145c94776", "value": 59152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742525, "uuid": "9e6a74e0-86c9-4293-8fd8-1226ffe23168", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742525, "uuid": "54aba17f-4d2e-435a-86b2-78d9dab33a85", "value": "t1c9a0126040221dc01140c7408300020c0d142159281145d002c4875308093c4a9699", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "123fbef7-2aeb-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1718697969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697969, "uuid": "b09e10e5-d056-45e2-ae45-13515ef4d55f", "comment": "Malware payload (Gh0stRAT)", "value": "bcb3fe24e81f8e6989bc8005838433a0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697969, "uuid": "3c26b68d-b35e-4649-923a-7ee1dcf14a4b", "comment": "Malware payload (Gh0stRAT)", "value": "16e1161c1d4af3aa8a645d1dbae0ada29fd4a7df7208b3f0656b44a7d2bbc3b8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697969, "uuid": "cf22e90c-e4b1-44a8-b4e8-4fd44e4ae33a", "value": "T1EF841210A0FE4C19C2C521740D2DAF8A6CBA50E52EB01C4FBEADFF765DF59D890286", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697969, "uuid": "eea72a6e-2efd-41e6-a00b-bf43492a9a03", "value": "92cbf1b7939e726b820cc211fce00750", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697969, "uuid": "7489788d-7692-42bc-9007-9e5c3a30c06d", "value": "6144:ORjbUHOvGUNIE/FDjBazqjWgR+MSEtvlZTONpRGX5B4PY3mA0O0Gp8Nhn5Jod:ejbh9tDjiuT+xEtl0u4w3mAZyUd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697969, "uuid": "10096940-9f5b-48b6-b9e2-9114c247525f", "value": 384000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697969, "uuid": "1e9a0632-dc2f-4793-94d9-c75c1b3e3b74", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "127e8fb7-2aeb-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718697967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697967, "uuid": "a2d25ea0-b800-4773-9150-19faf1ba66da", "comment": "Malware payload", "value": "d235285e6e98fcda120673a5bd248341", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697967, "uuid": "c250f61a-716f-4e38-9471-84254d6ec0f3", "comment": "Malware payload", "value": "ad515feed47844341fee65e2824bae7675a17b263258f87c73e21cfd94c93866", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697967, "uuid": "008e5fb7-54e1-4d6e-9dfe-e9820571032e", "value": "T13F538D137882C073C4C381F258729F5B2BFF3A31056019A3A7941F6A6E31685AF37A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697967, "uuid": "f65e96d3-24a7-4239-ba67-24694a12ac37", "value": "45faf44fe201670daca333d176faea38", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697967, "uuid": "c2453983-ba2b-4a01-b5c2-1431c8ee1e71", "value": "768:3e1iZNbQAKrWGOkGQeN70ZqL37tMKBBmbUt4i:36iZNer5GQvkaath", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697967, "uuid": "9925eab8-e94a-4c48-bb8a-f21dc4789a37", "value": 61506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697967, "uuid": "5dca0c7e-e16c-4d00-a7e3-36a2b211ad29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12d696dd-2aeb-11ef-b2b7-82aee05be84a", "comment": "Malware payload (MimiKatz)", "timestamp": 1718697973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "0412ecc0-f369-4386-8b37-269aa83efcd6", "comment": "Malware payload (MimiKatz)", "value": "297b896dbf8d619c61fd947086fce6e8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "2b37831f-c9a5-47ca-a09d-d19275ea426d", "comment": "Malware payload (MimiKatz)", "value": "b294f94c469f43a78a324b5cfecbde0afb3aa0256bbde06ca2718b8c038a9324", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "5903065c-8654-4c7f-8ee0-2148e0f50664", "value": "T18825181563E91098F1B76AB1AEF29506DBB378D61831C30F01A8865F1FB3E919D2D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "70b568f5-698d-4cc8-8fc9-ea0a65314a4b", "value": "fc751f775e55aacb1c0c763364369f41", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "eb0d8204-c072-4727-9af2-865069dcb36f", "value": "24576:rjEObtgfYpGGQakZ6tXEu3hA+w3552NGQ4wE:3EngmstRhA+wJ5e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697973, "uuid": "e5a5ce59-72f9-4980-9f36-32b759c6bd00", "value": 1002496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "eea7be27-accb-47b5-9d4e-7210258c5730", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac9dfc4-2aeb-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718697990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697990, "uuid": "20800b46-b287-4e1c-8c9f-cb914da3670e", "comment": "Malware payload", "value": "58f8e96f834d5d882046bd503ee83b18", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697990, "uuid": "b2170c0f-abf9-4505-a9a9-a742c4cc77cf", "comment": "Malware payload", "value": "97ba9760d2b5c0ea8931ef386e725eb57bf190960895b37e98166559c5f49c84", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697990, "uuid": "baf579b6-dfe6-4ccd-a3a4-211079b79610", "value": "T1EF16F00BBCE044BAD0BE933288A251A1BB62FC550F3117C72A90B67C2F76BD45E757", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697990, "uuid": "767f95a4-1ae6-4adf-a615-94f6a233cd7c", "value": "4f2f006e2ecf7172ad368f8289dc96c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697990, "uuid": "be8be836-41da-433b-95b8-9e89980916cc", "value": "98304:8+LJ9ieU4RXEf8pXU3Kr8LbEpLpoPL4a8hoo8lrg:84J0yRU2L82CPL4aeoP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697990, "uuid": "85974375-a687-4a91-b520-eca4ee011aea", "value": 4344320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697990, "uuid": "8d6168c4-0bf7-41fc-9d97-95e1290a75e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18852818-2c84-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718732044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732044, "uuid": "b59ff17c-1d81-4447-a19f-95582b5f3639", "comment": "Malware payload (Amadey)", "value": "07101cac5b9477ba636cd8ca7b9932cb", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732044, "uuid": "c3920ed9-f2db-4289-88a4-9da66fd0df8b", "comment": "Malware payload (Amadey)", "value": "488385cd54d14790b03fa7c7dc997ebea3f7b2a8499e5927eb437a3791102a77", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732044, "uuid": "fe165896-8d1d-43b3-aab7-b667622dc6ba", "value": "T119947D207803C032C62192711E68FFF6959DB9255F7109DBBBD84F3B6E211E26A35E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732044, "uuid": "4844c7bc-0fc8-4e04-bc8f-493aeb08bd90", "value": "39e221da42b9cac717741c15ca264eb9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732044, "uuid": "aea804a1-7133-4ff1-aaa1-b222c4ecf5ad", "value": "12288:5fSPtGpmLb84Jjzo6yrBuKuJ+ITOC0Ud:UtGpmf8edykhV0Ud", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718732044, "uuid": "a91665b6-7375-4a7c-becb-f0dd775f35dc", "value": 424960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732044, "uuid": "447f814b-6307-40b9-a0a6-1b73e98ae075", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac59b6af-2cb5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692510, "uuid": "7f0f6a7f-0380-4145-9df2-66e07a99d36f", "comment": "Malware payload", "value": "ee6dd7562dd13499e57fce2f54d08624", "object_relation": "md5", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692510, "uuid": "eb25fe87-01d1-4453-a830-0dc7fe4bc7b6", "comment": "Malware payload", "value": "f7458f54b23845b409e68938738ce1ae6bfa346ae10d5cd6f43f887b7dee7731", "object_relation": "sha256", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692510, "uuid": "6fd938cb-1690-4814-88a9-3693a5226c86", "value": "T17631245315625DA8CDB6FC394B079427E9E830403B74AFB747D1C864A727E14552D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692510, "uuid": "798e330c-9f62-4935-9523-9eebdfea0885", "value": "24:BDHKSLQW8laS8VWj/zBELxwtaKB5xxrDNSv7NtX+t10KgkSWlBuRo:tq85wc+/dIkzB5H9Svn+fTPlN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692510, "uuid": "02fbc9ce-ef96-4796-ab7c-f1daa03da569", "value": 1448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692510, "uuid": "70b530f6-8143-4c0e-9c1e-4b147e452680", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac5a1336-2cb5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692509, "uuid": "a63d806f-b70e-4472-842f-563b5cc17dfa", "comment": "Malware payload", "value": "09307734c54135499ca38bac1be10695", "object_relation": "md5", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692509, "uuid": "7b387021-21b5-49ff-8a84-35c43c3de721", "comment": "Malware payload", "value": "cb16c05e91c684352e8f23e825edc78bd3bfd1455057b65a46f19412ec4012a0", "object_relation": "sha256", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692509, "uuid": "07ae61d3-ba80-4157-bd94-5703a8a18305", "value": "T17831245315625DA4CDB6BC394B079127E9E830403B74AEA747D1C8646727E14552D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692509, "uuid": "14eccb27-3117-41d2-a445-af680ffeeacb", "value": "24:BDHKSLQW8laS8VWj/zBELxwtaKB5xxrDNSv7NtX+t10KgkSWlBu:tq85wc+/dIkzB5H9Svn+fTPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692509, "uuid": "30252c5a-bb93-4fc9-a746-089cd18e4eb3", "value": 1448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692509, "uuid": "b8bc4caa-b3ec-47a8-9bbe-6fa10bb42e23", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac6d6886-2cb5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692327, "uuid": "59680f9e-21cf-4a01-b925-cf6594fe7f9d", "comment": "Malware payload", "value": "7566db75b721933d8efc059289298648", "object_relation": "md5", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692327, "uuid": "5a6a151c-66c7-4261-8a18-9c45345a3bdd", "comment": "Malware payload", "value": "582364d5ed5c2d823556b1c47de687bb830f3a70f293f65c01a3b2bc0eaaff4f", "object_relation": "sha256", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692327, "uuid": "ff219acf-b8c9-4c7f-89e8-8a0bf0d2e820", "value": "T12431475315625DA4CDB6FC394B079427E9E830843B74EFB747D1C864A727E14553D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692327, "uuid": "d2881b50-ba14-464a-8f12-bb25844d9827", "value": "24:BDHKSLQW8laS8VWj/zBELxwtaKB5xxrDNSv7NtX+t10KgkSWlBu/:tq85wc+/dIkzB5H9Svn+fTPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692327, "uuid": "167da183-b0a2-4756-8886-c9f087a774b3", "value": 1448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692327, "uuid": "ae7379ae-d803-4111-958d-2287a505315a", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7d8a8f-2cb5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692328, "uuid": "f64dbc74-a461-49d9-b66b-0893dba6a13d", "comment": "Malware payload", "value": "e133a0d1c33b3e691e83bd79904181e4", "object_relation": "md5", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692328, "uuid": "d4096a44-4cac-4502-8a04-54dc5cefebaf", "comment": "Malware payload", "value": "a9aedccb0616f3628e964488d31b0db598a6ad7406ae9d8161c9e8f5ae40d077", "object_relation": "sha256", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692328, "uuid": "cddcafe2-f92e-45df-bb7d-3d7ff08035ef", "value": "T1D031245315625DA4CDB6BC394B079427E9E930803B74AEEB47D1CC64A727E14553D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692328, "uuid": "49e0d409-ad57-40ec-a422-c17dd4f91bf3", "value": "24:BDHKSLQW8laS8VWj/zBELxwtaKB5xxrDNSv7NtX+t10KgkSWlBu:tq85wc+/dIkzB5H9Svn+fTPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692328, "uuid": "dfebab1b-3926-41ff-8134-0abfcf25f5d1", "value": 1448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692328, "uuid": "ebe8fe28-84e5-4206-92df-a537d21155a5", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9439468e-2cca-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718680037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680037, "uuid": "1119932c-266b-4d4a-88d5-1cbce3a10654", "comment": "Malware payload", "value": "ab152bfdf7b4d98b5bde9ea4bb0a339e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680037, "uuid": "c8ef7de8-ca03-4ccf-bd7a-d43f33bad2f4", "comment": "Malware payload", "value": "95412ea114ade97c4a51fd6fdbf0ad370f4826d73105c8d7ce295e22f0af6dc7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680037, "uuid": "0ba13c08-9e7f-451e-8228-4428bb6655b4", "value": "T111560912BF58ED2FD25421308BB7C23433D53D1482E16533AA56F71E2EBA2B5991BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680037, "uuid": "9b9fdc12-2f1f-4d1b-957a-1a2e8af837b8", "value": "49152:XralYsYZ/MjJ7fhN2pCQLg1xbnZdY3MniUj0E/GiV:Xr9lMjJ7fSjWjV/P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718680037, "uuid": "68336f74-ada8-4254-aa2f-791756f7a14d", "value": 5963776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680037, "uuid": "375aa905-1778-4673-966c-7b93bdb0ece8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff4a2e9c-2d05-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718668925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668925, "uuid": "2effb2d0-63de-4e8c-9da2-2a6ba32cdd69", "comment": "Malware payload", "value": "dfbd9dd74eb85d5272d89ad1cbc42ba1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668925, "uuid": "cdc76332-e7eb-4a69-8f2d-ea08813f7f2c", "comment": "Malware payload", "value": "eb264c4663b65d59dc2c75730e8acdf134205a54698892449f280bbcac14dfda", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668925, "uuid": "cb11ca52-309a-4070-8538-1a3ae657b2f6", "value": "T1A093D75ABF610EFBD86FCD3706A9070635CC551B22B93B363674D828F64A14B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668925, "uuid": "16bdaf49-0abf-4a98-bf12-a435458bbf76", "value": "1536:CRA6Yi43BtRtT6YSdogNExQELgn7pQgZkgK0yCXnApl2p8uVgNhy3:CR/YJBb+E1LgndQgtnAC9gNQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718668925, "uuid": "5a29f909-6656-4310-9dab-b3387a0b57c0", "value": 97260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668925, "uuid": "75405e50-6608-42d3-83ef-c8d31950e89a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c86304a-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718668947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668947, "uuid": "a49248fc-7f4a-45ce-ba7f-5970605c5160", "comment": "Malware payload (Amadey)", "value": "5304f068dca5d8925be21f2c3bfe05cd", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668947, "uuid": "9b3cb5ff-fada-4574-850c-3d22b108995f", "comment": "Malware payload (Amadey)", "value": "ff9f6e7ca9dc5c96cffba2dc14de9d09b64366f449fb5dbb7244e8a912da57fa", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668947, "uuid": "7ae3624d-cd65-435b-8654-a84d87611ca0", "value": "T14C9533684ED7BECACB980C793A7ED146D70A4AB4C47F9D13CB9A21B8D0D3B0D34664", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668947, "uuid": "4d4d79a2-6721-479f-b010-c015cf2c364c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668947, "uuid": "9810f60f-da86-465b-a4fa-b456340e3901", "value": "49152:a0WZojvDu9ahQm0s2afpzJeMG4lKzAkiPexS2/J:a0sofGahQmZ2a9VG4mio", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718668947, "uuid": "cafdcea1-de58-4905-af7d-6b9d540dcc6a", "value": 1892864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668947, "uuid": "873e50f8-b3b9-4b0b-87f1-d67ae30def48", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5be86956-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718669080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669080, "uuid": "5349c524-0c74-4612-ae8f-e63e9db68404", "comment": "Malware payload (RiseProStealer)", "value": "479a292ddcd0e01f1cc33413a3d80d25", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669080, "uuid": "9b6654a3-0d58-49cd-91d3-fb40a5750f21", "comment": "Malware payload (RiseProStealer)", "value": "d684e770e898dafd941046e3801d3875beed76b6f9af3cdbbf3ddb9fc6ca5a7f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669080, "uuid": "292aafb2-1b0e-40d3-8e4f-ade6f3c329f6", "value": "T1B25533AC1932D760D77814F76042547E3F59FF5E888E861195AF02D70EA20DF4B2BD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669080, "uuid": "95e40c57-1a52-4f2d-b710-86608fc15c6e", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669080, "uuid": "6c2a558c-84d3-4321-a1cf-e551af8ca668", "value": "24576:Ewaprikq+uBIU4nrBjJ/6jEkmZL3Hvm4rSYwQEyEvOBPZsrI:ir+mVrBjJ6jEkmZRWYlD5Zg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718669080, "uuid": "390f916e-1a13-413a-9506-42ef874ce014", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669080, "uuid": "117260e1-f9ad-433c-94c0-ec8257572387", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97661f51-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718669180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669180, "uuid": "4dc0382c-c92e-4241-b2ef-9e5f0220f456", "comment": "Malware payload (Amadey)", "value": "58e647d4648c936b1a4d63998d7338a3", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669180, "uuid": "1c63ad29-1ccc-4d8d-bccd-ace71adecf10", "comment": "Malware payload (Amadey)", "value": "97720d9ecf5926cbf5fb466be24670cc67b496add4d889011134eb74bc10dc43", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669180, "uuid": "5013fe07-5f4e-433b-96a6-999a578224aa", "value": "T16995331F6AD23062CDDC68B564F3F3817E071C176CD81507B98CA528A1BAADB4E856", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669180, "uuid": "e2c8b10f-8be7-49ad-af92-e383cc56dc02", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669180, "uuid": "cb90ccd0-3f93-40b8-8cff-abb7357899da", "value": "49152:ilxVh5ITse2HLgWQoqOQlNmjD/Dna4pC0mTzgZsug:S5IPVWQozQonnTC0Ocng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718669180, "uuid": "2a1cc48a-c4a2-4133-8990-bf5af7f15c2a", "value": 1897472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669180, "uuid": "ed69e67e-2778-4e17-bda9-9d3144135d86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c7de83f-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718669376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669376, "uuid": "16049ab9-630d-4a0f-b9de-a9484801be3a", "comment": "Malware payload", "value": "c5f7462ed6e9b480154404c180dcd678", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669376, "uuid": "247a2fec-b881-42ff-a5f2-877d713a7dc9", "comment": "Malware payload", "value": "18bb536d0bf7b741f5223d7eaaa2cdcd6002d3d2cbadeb6f9660794b474fd22c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669376, "uuid": "9452aa9a-ddc6-44e1-a535-1b975556a132", "value": "T11145BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669376, "uuid": "431e629d-668e-45c2-95f1-28de3ac59ab5", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669376, "uuid": "56402329-ad6a-49b4-926a-6849d3f6a6e6", "value": "24576:BqDEvCTbMWu7rQYlBQcBiT6rprG8aul2+b+HdiJUX:BTvC/MTQYxsWR7aul2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718669376, "uuid": "3ca28701-0c8d-4ac4-b41f-7a8dd1d67ac0", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669376, "uuid": "c05a70e5-d3cc-4722-86dc-2d4c3ad0be1c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87618958-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718669583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669583, "uuid": "acd60875-2f0c-4dd1-9bed-58ae3017a654", "comment": "Malware payload (RiseProStealer)", "value": "74e249f389a2b320dc7c1d8dc0a0cb70", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669583, "uuid": "46500ce8-990f-4d24-90e3-f56aced31808", "comment": "Malware payload (RiseProStealer)", "value": "89e1706c1062a200df8d945d217e2bcd60061b990371c899a8b1e7f2e8675573", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669583, "uuid": "3abc99ee-1999-45f0-b8a1-be2d232ba4d8", "value": "T11555331D1BFE7A52C2155FF5226AABDA6CB9BE7955003B230EA734150CB04CC2F69C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669583, "uuid": "11d437f4-de74-407c-ae6e-4ed154936cb7", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669583, "uuid": "01ba123d-c730-43f7-97a1-2432ade96bb8", "value": "24576:hgFEU93CEag9VEUSomr/AKH/jmQwQ7BaWnBCqaCNU4NGymxOnVt9Wf:hQEU93racEUSjr/AU/jmQl7BaWnta0UZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718669583, "uuid": "f99364e1-2f1c-4f26-a50c-287b6f92afce", "value": 1326080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669583, "uuid": "6fec010d-b4c7-4b4f-93e4-1d3fadf9124d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7105ab3-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718669636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669636, "uuid": "cb2e6bf7-4b5f-435e-a55f-90047d2317d0", "comment": "Malware payload", "value": "94863c24a52e7fb58a49a0811fe03d52", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669636, "uuid": "d63ce44d-0c4a-4883-adaa-7a9ee734b6ec", "comment": "Malware payload", "value": "9b6f7530001e803bdaacb6bee22c73abecb1049e3e08b3a51026180d22edb96c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669636, "uuid": "cdd92077-fd28-4a24-873f-63956ed0773c", "value": "T1CA159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669636, "uuid": "df90cd21-c55a-458c-ba9a-b676979840fe", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669636, "uuid": "a1599884-12eb-4793-97db-619ff33dd8d4", "value": "12288:qqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Td:qqDEvCTbMWu7rQYlBQcBiT6rprG8aAd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718669636, "uuid": "b33906c1-1ec5-438f-a137-cf1edbf83f57", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669636, "uuid": "8080b7dd-cbac-4d15-840c-c5caa2f949ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35fbce7f-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1718669876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669876, "uuid": "5c191895-d89f-43e8-b041-2a196fe736df", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "0df9f5581cc6f2be595f554c9853cd61", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669876, "uuid": "2a423e2b-4ea1-4dfb-82f5-412e77d7d016", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "2e218cd6bfd38d22507f9bad2fec94e0319485c83cd8af998d4f266a3ae03655", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669876, "uuid": "a5ac70ba-aff0-425c-bc97-29c8a9415b06", "value": "T112C4DF0292A13C57E7664F729E2FC2E8760DF921CE19377932589A2F19B0172D2B77", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669876, "uuid": "5fccb9c7-9102-4201-96bc-b24b58276f45", "value": "c908a4420979758f7fb5691991db27e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669876, "uuid": "b8ac52fd-be8f-4871-99b3-92592cac8255", "value": "12288:l8mP5Eg4u9oIElgFmkd2V6luEsIzXyNRzoR5nwPo:l3LFo/i02SILUseo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718669876, "uuid": "a5a70ffd-0b2f-4a52-851f-48f155e8b617", "value": 590848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669876, "uuid": "1fcb38ed-7b03-49e9-9555-80723fec0564", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8488c8ca-2d09-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718670437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670437, "uuid": "38b5deb4-c819-4627-9c39-e437a2e93292", "comment": "Malware payload (Amadey)", "value": "342d41279e93388c9b6a14c5def20c3d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670437, "uuid": "3a3e060d-2785-4d78-b69c-7b74a749395d", "comment": "Malware payload (Amadey)", "value": "af144184d55539d3c0c98261018c4c0e2821ba05755660aa18748a91414f9b15", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670437, "uuid": "2d89f5b0-44b3-4970-acc1-ca741d64c987", "value": "T139949D0392A13C87E7268F328E1FC2E8761DB561CE593B7A3258AA2F15B0172D1777", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670437, "uuid": "d35d8d8e-6931-488c-b48e-aa004aed0dec", "value": "c908a4420979758f7fb5691991db27e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670437, "uuid": "73036e4e-3af4-44cc-b3c4-1ffd8e1f466e", "value": "12288:elyJnz1tPepKAuJCHWJVRGpuDz+IVCuZ:eKz1tmsfV6IXZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718670437, "uuid": "2ae91460-46e3-4eac-8e35-695c5aa6d391", "value": 437760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670437, "uuid": "8a65bcbe-c2f6-494f-8b9f-0cfbdec876b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acda8796-2d09-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718670504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670504, "uuid": "95397aff-5890-4af4-b74f-21eaf89116ae", "comment": "Malware payload", "value": "c608d5bdf14704f3c8b8605ee333ec3b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670504, "uuid": "733fd734-6915-4f81-8694-25f5b29eeb42", "comment": "Malware payload", "value": "c7bdea3f40324029036741b03f12133fc47a7a262944b251eca607f01e0d8c8b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670504, "uuid": "382e2f20-8f60-4f6f-81a3-06bbc9423bc6", "value": "T159848C4392A13C5BE7664F328E1FD6E8760DB521CE5A3B793258AA3F1870172C2767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670504, "uuid": "79566007-e98c-44a2-9b99-359131656c96", "value": "c908a4420979758f7fb5691991db27e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670504, "uuid": "afde7db0-30a4-4f6c-976f-5fa2ec1ed472", "value": "6144:izOzq/C3A3j9nvdm5nOlWB6wRurOeVuepTe5FzBvVQmiT:MZ/C3+1mwlWpurr8epGnQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718670504, "uuid": "fb6eac05-099b-447f-8535-a0448de49043", "value": 387072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670504, "uuid": "c52dbaa8-8398-4482-9ec7-76f284879039", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff055bcd-2d09-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718670642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670642, "uuid": "e2b7f6ef-abd0-496b-96d8-2df84fc4f4b0", "comment": "Malware payload", "value": "18dbc5624eb0d6cc55eccd6f3ba75201", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670642, "uuid": "84534f0b-aac8-4fcb-81d8-bad838a20a29", "comment": "Malware payload", "value": "53ea03655f9943fd23a9e3d94584cdf29e1121a84a1e117b3ee0fcc7a21e532e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670642, "uuid": "b4910a9c-2f0a-4881-b366-55628d9cf561", "value": "T1E6633B91FD819A12C6C122BBFB1E428D772653A8D3EF72139D259F20378786B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670642, "uuid": "e1f36e8e-7989-45e9-9958-86f93ed569c0", "value": "1536:erFUIyvSrCm1052kIrKxJD3Qn2PyqCkMm0QHo8UMshQg:er2IbwSKxJD3Q2PyDDQNWmg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718670642, "uuid": "4c09dfd2-27f2-4467-b6d2-f07988ce895e", "value": 72924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670642, "uuid": "fd4276ae-7c04-4845-9cd1-dea70cd10075", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670642, "uuid": "67153e3a-746b-4848-976a-300ad8a04ae3", "value": "t14de0c07284580ddda7c0548402df23e96c44707e2fe23465c19b7fee5491dd1f0026", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "347596e7-2d0b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718671161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671161, "uuid": "01e62ce7-b072-4c3e-a88c-1ce6cac725e2", "comment": "Malware payload", "value": "482f71291bb001ee7f718d366def407e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671161, "uuid": "87fb7d52-ae41-456b-911e-234b6179977c", "comment": "Malware payload", "value": "16c8a1e78cbe191dc431ef984b43ddaa2336fa8f1328f72bf4462ee1c6507c50", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671161, "uuid": "3cd1c97b-9754-427a-9398-d6123e1e69b6", "value": "T1AD830855B8819B11D5D112BAFE1E128E33131B7CE3DF73129E20AF24778A96B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671161, "uuid": "ca6b8412-2b6e-4123-921c-1269e863ba06", "value": "1536:7mn3prrBHz185RI+ZGYxachm5Q3MPikqB06Tvt7Ja5wYdhPs:uz18TvZGYxac2qB06Tvtda+ghs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718671161, "uuid": "ffb73004-ded4-412c-86a9-a023c2f3ddc1", "value": 83648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671161, "uuid": "71783ba1-6575-461a-bf62-bddf09450f5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671161, "uuid": "ae0a7ed6-bf94-4718-900b-8a5c7f44a64c", "value": "t1d5d0a7f2179468dea6f0430d461ea25e2cdd75ed7b5100b5e24b63ea03e51940616c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "252e82ca-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718671565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671565, "uuid": "629a2c87-f7b8-45e1-bb19-8fdc37f59492", "comment": "Malware payload", "value": "9ca7b87e1439b6bb7ba97c6cd4ff6ce9", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671565, "uuid": "cd0f27ad-e96c-4bce-bd9e-6f7bfe31cc39", "comment": "Malware payload", "value": "6a0691b3cc8736aa3ae8ced933c25bfd533e24d7abb7aa19aee899099c7f14cd", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671565, "uuid": "8625b53f-213c-43d4-82ec-a1aed5655f2a", "value": "T17F132A03F94640FDC05AC5305BAFA537DC35BDAD1238BA9A6B84FE312D22D214A5EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671565, "uuid": "59614fff-b14f-43df-b08d-116c290ddf27", "value": "768:7429wsYcRTc/wMF5mn7dT94ha0qYjsuRv0OKKSCe288Hf:LzP9c/wMFMdTyTqYFRv7jze2Bf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718671565, "uuid": "33794f05-dd4b-4c71-80c7-a3f42c4f8aec", "value": 45296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671565, "uuid": "7cd69148-c4e6-4a6e-820d-6831418bd4ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671565, "uuid": "38b272a5-2647-40ed-a55a-9e9021c04045", "value": "t1281125b63a9a3690f1e3f1127746e1309e310e2224c036e291797dfaea71b514b71c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2cfab8e-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718673977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673977, "uuid": "b50de026-fa0c-4a11-887e-c232b9693717", "comment": "Malware payload (RiseProStealer)", "value": "675530afda5d7ab67e906298b5318a7a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673977, "uuid": "ba41e915-92fb-4146-8d5b-c925bd502b59", "comment": "Malware payload (RiseProStealer)", "value": "5101237b9f62bf90110cc007470edbb95899e988bd1d6095916e49277200e01b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673977, "uuid": "c459dd7f-817a-42eb-a9fd-7308d4ae439c", "value": "T1EF5533F5D18BA530E934853A0654217E1B5CBE6C448B2EE7C94F124266302FF7F8AD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673977, "uuid": "609213fc-54dd-410d-892c-10208eabc75c", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673977, "uuid": "cc341f64-ce9a-48b3-ab2c-2c14f900534b", "value": "24576:CMq6SHXiDlGypgJwcTpldjvXkcX4fVYjlyUwQnyEvOHY7Wk4nw:0iDlxUzjP10Yp/lwHgWkJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718673977, "uuid": "42f4aae3-f918-4fec-8204-69ddc8f376e7", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673977, "uuid": "2c0244d6-60be-4876-b732-c9cec315695a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcfa9a5e-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718674021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674021, "uuid": "993f60f8-5083-4608-bc18-dc7d0da6166a", "comment": "Malware payload", "value": "15607c541f8495d352d5186dc03a0368", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674021, "uuid": "04022aa8-d69a-4d58-91c3-2c6e791c382b", "comment": "Malware payload", "value": "f5430464bae6dcb8dff26f0392b46ab9dca82d5039c5593a4a509d12e1d2d2c2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674021, "uuid": "9fc09d70-0339-4bbe-967b-3efdf12eda1a", "value": "T1C9159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674021, "uuid": "77422260-e9c9-43ae-a883-6ca1e8145fc5", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674021, "uuid": "0b1fa303-d6d7-49ce-a9f7-a2db74e7930f", "value": "12288:iqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TH:iqDEvCTbMWu7rQYlBQcBiT6rprG8aAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718674021, "uuid": "ea5f0921-c0b8-4a0c-b14e-272b6422adce", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674021, "uuid": "12de7284-464a-49e5-afa6-199b4129ddbb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29ad9696-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718674982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674982, "uuid": "6ff55de6-71d4-4f08-8065-8c4d43deb042", "comment": "Malware payload (Amadey)", "value": "42fba0a27c355a5bfae8434da8d92145", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674982, "uuid": "cc525ff1-d349-484c-a2ba-62983ddf51fd", "comment": "Malware payload (Amadey)", "value": "c6f583a17cf5b48adc40e13624447d29d0be1681015f965df6cc1e67dc0583c4", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674982, "uuid": "5fd92ec8-529a-4d4e-a987-251da10bf845", "value": "T1B69533A4176992FFC20A5373A4A7464E2377E3B4428315FE239BA1345C26396BB04E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674982, "uuid": "9cd1c797-96be-4ede-afda-7efe984be707", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674982, "uuid": "29877fb8-21bf-4b1f-8b12-1ad0fdc0e634", "value": "49152:Fv40jvxXIpdsla5iKcwTQ2zhvYUCuck9AS:Fv40jvx+OcZPlb9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718674982, "uuid": "86771f7a-8e6f-457b-8241-adff28ed2215", "value": 1934848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674982, "uuid": "e26ca005-fcd0-4970-b54e-5bdd2998178f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bbe2e03-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718674153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674153, "uuid": "b5e45b85-11e9-4c19-9b43-2eb4c500c81c", "comment": "Malware payload (RiseProStealer)", "value": "f3ec0345cc179fd120ed0a21caf2d923", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674153, "uuid": "cdd3e9a8-224d-41d9-b6ee-7cc0bc80f970", "comment": "Malware payload (RiseProStealer)", "value": "f63776827f6efb7f319674ba365a997511827ff9a327a9471705e4d542e3f2f1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674153, "uuid": "d9a1778a-2cb7-4ae1-819f-cfbd4437521e", "value": "T17F55337A811D4220D335F0F956FB93F748287CA9645DE43AA03F6490442A6CD7BDBE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674153, "uuid": "fc9995c3-de2e-4ea7-9794-d49e273bb3df", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674153, "uuid": "e474029c-b130-4476-babb-a4776bf0a346", "value": "24576:CUwWmiH3F+jO80VLnr7wQ9N2K3yWds0JkKyV67Yh+qT:CYgjshnr7liadsLASJT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718674153, "uuid": "c7707684-b2df-43dd-b578-d3819544410b", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674153, "uuid": "b538cc9c-1047-424a-8fc0-6c7a4e70ba0e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c01983f2-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718674402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674402, "uuid": "5cea2e73-8b55-481a-8ad2-a2817770b203", "comment": "Malware payload (Amadey)", "value": "17515567f0886c040dcbfa4626f8904f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674402, "uuid": "4d66d12f-efc3-471f-a4df-ec7aed32362e", "comment": "Malware payload (Amadey)", "value": "c0c69f76a09d9b452958b28a204b267d3005a0702ea825e3368023261b6514c8", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674402, "uuid": "45fa5e65-90ff-40e0-8c39-c1548f2c1f43", "value": "T1BE953315E3778C96F12E493A01DA9F8D36752A91C279FF7E037BB0140A8F744129B4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674402, "uuid": "3fb4b04e-0afd-481a-af3a-35b8ca76be19", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674402, "uuid": "76e11ce5-0096-48ca-b781-663a1cd6586c", "value": "49152:RgnfTeFip7FUi1kAOhAWZNDPHthj/WvOpyI0NmrK+:CnbhpBmD3JPNhIOpydmj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718674402, "uuid": "05495624-78f4-449c-af88-fac5599cae32", "value": 1890304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674402, "uuid": "c6b7fc52-35af-4ed5-84a6-bced956b366d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e4e0f2a-2d13-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718674587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674587, "uuid": "1797724c-3242-4760-9692-c39b399d771d", "comment": "Malware payload (RiseProStealer)", "value": "e804926f39e59a82e5221cd2500030c5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674587, "uuid": "e8ef46e5-4d34-495a-bb39-934065517532", "comment": "Malware payload (RiseProStealer)", "value": "ede08b69d6f63768bd94008a0b49848feb2a13073fc5c0f75b2f0549bbb42a87", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674587, "uuid": "39f5bc9c-56d4-46dd-8c86-f2a6ed84a5bc", "value": "T1E15533F20B4FA728D4B4B1F226952B9C8718770C492E5231399F22E95C386FDAF195", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674587, "uuid": "38875d4f-73c4-4339-baf2-5963d6b5b2e1", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674587, "uuid": "06fe7de0-2c30-4d32-a4b5-b2ac9712329c", "value": "24576:HGIwN1181GWAxBOtn7xI79exB5ojaT5mwQZsiK387BC1Tta9n:mpFuT66B3T8lW387BCh2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718674587, "uuid": "95a2398e-173c-4e3c-a5ef-fcd194d8ff39", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674587, "uuid": "1c0881dc-0f28-4c70-bcee-0c5d726d1362", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b98dc6db-2d13-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718674821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674821, "uuid": "a39d5a3d-4c2c-4b57-8309-b2a3b6d67292", "comment": "Malware payload", "value": "16c37c6efcb0834aafc9cd269911b570", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674821, "uuid": "d1f82c0e-ce5b-46b1-b0d1-59e5d214974b", "comment": "Malware payload", "value": "d2b191797c85e44ae92923011570d57411419d9564e5a82a99d1e81316105773", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674821, "uuid": "e2f49b38-5af3-46fd-ab81-f8b4e2e6c56b", "value": "T16D45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674821, "uuid": "3a993fc7-333f-48c1-be1c-fdfb2f8272ae", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674821, "uuid": "3628423d-6569-4913-bd7e-b56879aa253c", "value": "24576:XqDEvCTbMWu7rQYlBQcBiT6rprG8au12+b+HdiJUX:XTvC/MTQYxsWR7au12+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718674821, "uuid": "b8697fb3-ac1f-41cb-ab74-bee55226175d", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674821, "uuid": "fa55b97c-d171-4310-b994-e813db97b048", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bd726dd-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1718677150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677150, "uuid": "94a07bea-eeba-48bd-9cf6-afc9fc103ff4", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "983eb42a5e7c49c765291c7bdc8235bf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677150, "uuid": "48a0d09e-b5c8-4e1d-a800-e11a88d683ba", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "a33a09711d1a29f805d5a83043bbe6e343aa25d126c701f917e973a22b4435f6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677150, "uuid": "85d3bc03-de05-410e-bab5-2f37405c50d8", "value": "T192C4CF0352A13D6BE7668F728E2FC2E8360DB5218E597B7532189A3F25701B1C27B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677150, "uuid": "b028eeb0-cd1d-48aa-b72e-1b4ff85de3fb", "value": "a81c2e23bd7add892483dd1cc3490827", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677150, "uuid": "255fa139-e1f9-43d3-af35-a1546b58669c", "value": "12288:b2WkRXD++x8hsL56yqq41UEAvqWMzWNjZXX9:b6s+ehsL56bq4RAv1Mq/H9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718677150, "uuid": "ecef8766-4d3a-4e5d-8608-0b13f8150862", "value": 590848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677150, "uuid": "51271649-4543-4f10-a522-98d88119cb01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c748f081-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718677421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677421, "uuid": "1f56903a-3fd1-4aad-8912-bed9e197d024", "comment": "Malware payload (Amadey)", "value": "3eb113934f8f98f979f302a400604d2e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677421, "uuid": "4badb7ff-de7b-4b4d-8b75-89abb096569c", "comment": "Malware payload (Amadey)", "value": "8f778cc25271d6ec7323fe05c280d0670b3545aba5ecd9229b6c8c0580826193", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677421, "uuid": "b24abbb3-231f-4a89-b0c9-55649cab34ec", "value": "T147949E4382A27C97E7668F328E1FC6E8760DB5118E59777932589A3F18B01B1C27B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677421, "uuid": "00a4db05-803c-42ef-8575-974f3eeff7e6", "value": "a81c2e23bd7add892483dd1cc3490827", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677421, "uuid": "28cf313b-e69a-41dd-ade2-308c53e3cffb", "value": "6144:CzTxWHpob3wjcfJSkB8m/5BE/efT1drl+QO2GF2oeOo0bFzBu9MQmiT:sTQpoEjoMg8mR6SHpC2URoSW9T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718677421, "uuid": "2de4e082-60c2-4b05-8771-63833c8422e3", "value": 431616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677421, "uuid": "bbb4cd6c-c9d8-4ecc-95d8-6f12d93b7e46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a1096a1-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718677748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677748, "uuid": "712d5498-8717-4502-ab47-4e92c279e1e9", "comment": "Malware payload", "value": "351bf9519fd1192664ec51032e20ebea", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677748, "uuid": "e3ce9ce8-acf4-4ea6-8d92-b286bdd0212e", "comment": "Malware payload", "value": "30a57a825a1396ae4f7bbb5311746fab52affab46e46589cf1189e1a3d2f2cac", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677748, "uuid": "e419caef-9ba3-4649-aad7-b255c169307e", "value": "T1A9848D0392A13D47E7268F328E1F82E8761DB961DE597B7932589A3F09701B2C2777", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677748, "uuid": "87418a13-eb90-44ba-ac20-ba646bae60a9", "value": "a81c2e23bd7add892483dd1cc3490827", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677748, "uuid": "16655ac3-9f2a-4f30-b460-40eea96a1178", "value": "6144:/zd6z/1vWqM417uLKOqdfT1jxUC3fVikFzsupKMFzB9sQmiT:rM/1vJhuLCN1jxHfVRFBpflz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718677748, "uuid": "adb149d5-5b58-45b6-b4c5-2aa9c05c15a0", "value": 386560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677748, "uuid": "8815a148-a6e7-47f7-8f1a-a43f43ac1e0b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e55f97a2-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718677901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677901, "uuid": "fde10b81-b33a-4cec-bd88-11477127ece0", "comment": "Malware payload (RiseProStealer)", "value": "025c1db331e9213dd36bbcf9d1923885", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677901, "uuid": "019283b5-16a2-4cc1-8bdc-8e8e31865f82", "comment": "Malware payload (RiseProStealer)", "value": "6dd9e056ac8d4ce40e4a7a49fd684fe3cdd4dcf2eb64d10b45824b41108cd2b8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677901, "uuid": "b028b087-d121-444d-ac19-22b8c05c42d4", "value": "T14C5533FE85180423EB2521F0F49581AE3AA97EF5AA0CCE62775F118A4D7049DFBDF9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677901, "uuid": "3ad3b577-8728-49fc-ad70-146929e8861d", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677901, "uuid": "53480e20-d5b5-4a62-aa7f-829a9fe6b4bb", "value": "24576:qExQTvrXVAWzn3mlZO7Ku1htuHFeW962Nqdq9uwQGz+8zBYr1TyjT3:qFuWzv7Ku1htuHImoYulGdYr1Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718677901, "uuid": "4ec2d77d-ba58-4554-a263-bba11e136231", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677901, "uuid": "e4251abf-4934-4002-af04-8230c749e233", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9606e53-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718677907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677907, "uuid": "3ebba03b-d37a-411c-8160-496d09162f78", "comment": "Malware payload", "value": "25c195c90d0e5e1846573d9771edfa64", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677907, "uuid": "63c6e132-cbe7-4fa1-bddb-259c4a077d22", "comment": "Malware payload", "value": "729cb00ef19362977b9096410dc9af3fc27d74e42e621c87ee74d2fcdd101eea", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677907, "uuid": "490039c0-3a53-4013-8165-bb70060740a4", "value": "T10E159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677907, "uuid": "9c0f2c59-ef0d-45f9-b07e-30def3f49513", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677907, "uuid": "1caad9ea-6c93-4606-bd6a-32b2d93b4970", "value": "12288:oqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tj:oqDEvCTbMWu7rQYlBQcBiT6rprG8aAj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718677907, "uuid": "ee49ce27-3393-4d3e-8e64-43085267eea5", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677907, "uuid": "e82e88a6-5fb9-4e8c-975a-cf25d5b0d413", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8805223-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718678335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678335, "uuid": "5f36027d-3bbe-4c66-90a9-9677e59c5b7d", "comment": "Malware payload (Amadey)", "value": "e0d33a4a6eec39eb38b6004688216316", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678335, "uuid": "2c822630-d321-4456-8734-aeb3161684f1", "comment": "Malware payload (Amadey)", "value": "2c5b50100076a887ee6f537eded2cbcd636970b6e8de8154a0f1b04af57d7833", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678335, "uuid": "1c5edd72-38e9-4502-ae4c-17bfd188fa60", "value": "T1709533DABE1B19FFD64C183061B2371CE70BEA3104BB4E6B8D6642E8F9534217A567", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678335, "uuid": "30e8416c-7861-4a1c-8e58-e9b06225dd9a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678335, "uuid": "74b433f8-8723-412d-ab53-7324ce79d1a5", "value": "49152:pKUBWqeX5fn/r9NLpS0KC3NoaZfSgkF3L2jLY:foqGf/RGqfSg+2jLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718678335, "uuid": "829ee54c-c0b5-42b3-a32d-834a905bdf52", "value": 1885696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678335, "uuid": "1a404c62-549e-4fac-ba04-bed5f7d7c111", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18d72eec-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718678417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678417, "uuid": "5f712fb6-852e-4def-8a54-3883ebe4d29e", "comment": "Malware payload (Amadey)", "value": "0c17a52b07cc74ff70e79beb5be4f9c9", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678417, "uuid": "3c502df6-ac7e-4205-8507-8987aa5a78af", "comment": "Malware payload (Amadey)", "value": "b9bef507bacb9b25afae8bafab1f19c6a6dce86782d0c17ca79ac0b05441bc2a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678417, "uuid": "64b4138e-9539-454a-9bb4-fc8011437a09", "value": "T1549533B067BC17E1E0BA8FF84C4B9150BA634339DDC110976C6B8E3384926F3F595A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678417, "uuid": "e6d57943-5e77-49f9-82e0-cc3e3f1694f9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678417, "uuid": "ecaf984b-2cfa-47ab-b856-01781f1140e5", "value": "24576:MUPBydJqEK2k7dFuu723HlXjcvSFU49hahXQ2oMkvEq9bdme8HovkhVgMUjocRir:tU+H2Du7wcKemkd8xY+YVgxoCY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718678417, "uuid": "87f9e360-627e-41e2-9b54-e12dcbc7275e", "value": 1882112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678417, "uuid": "1c20066d-50bb-4eb9-8b5f-6b3209df3e1d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73dbefd6-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718678569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678569, "uuid": "fa316255-87f9-4093-95dc-505099205f2e", "comment": "Malware payload", "value": "892f8d2fc83cab3012c1265f6259449e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678569, "uuid": "01bc4ac6-70b9-4e80-a943-0ce18a5218bb", "comment": "Malware payload", "value": "78c17a76e55b6793fa72e2449336303d4be3c0fbc4326b0c4c80bafc2234cc6c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678569, "uuid": "8e3d3a3d-5380-48b8-b1c1-5e48b796733e", "value": "T1C245BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678569, "uuid": "9292df6f-f83d-4270-8db6-b4c5e00f266f", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678569, "uuid": "8a6f6924-d2de-4c3b-8ebe-961cb8cb757a", "value": "24576:oqDEvCTbMWu7rQYlBQcBiT6rprG8auF2+b+HdiJUX:oTvC/MTQYxsWR7auF2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718678569, "uuid": "19228700-408d-4686-9b8f-1da1f25aa8eb", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678569, "uuid": "ef611954-b2d1-4f3b-955d-0a1293487c7d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "263954a4-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718678869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678869, "uuid": "170c6316-f0f2-4f35-b49f-eef32ef70529", "comment": "Malware payload (RiseProStealer)", "value": "eb7c99a386111f2d0f46e74ec8b139c9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678869, "uuid": "747076a5-6340-4c77-8158-028cfc8ef238", "comment": "Malware payload (RiseProStealer)", "value": "071c8a74c1d4e1e675243699e4aae37344b67c096aad81f5d22ebaf921edec7b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678869, "uuid": "7de507a7-687f-4304-8f28-6794f463195d", "value": "T1F65533A863B94177E205B7F04CB242A47B783CB965987F37326B79410E252CC7B9A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678869, "uuid": "b5058201-b8b3-445f-aa3a-c9e2f53ded77", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678869, "uuid": "e619f8cd-c8a3-44e4-bd02-f68e4324523a", "value": "24576:ZXHpgaOixsim3YX5qDYD8rOkbwQuz+83H5UL3v0lHv0D:NxsX3eqDYDZkblu5KcHMD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718678869, "uuid": "2b5b1f6d-1108-41db-b308-1dd55d61c2bf", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678869, "uuid": "d240d05f-8e24-4295-b456-3d02f88f4a3f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "614ec846-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718679397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679397, "uuid": "51be132f-97ff-4f8a-947c-b5ab92d8dafc", "comment": "Malware payload (Amadey)", "value": "6efc58ba3231fe5e498d4d5e8780e8a5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679397, "uuid": "e0edfbbc-3823-4ef5-bc4b-1622297e7c24", "comment": "Malware payload (Amadey)", "value": "3450381d29c657c6d74fa327c7ad8db720033895615995e90a4b89fd8da62ce8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679397, "uuid": "f3ceb293-ddf1-421f-9358-91e2109e82de", "value": "T14C949D4392A13C97E7264E728E1FC2E8760DF5518E593B3A3258AA3F19701B2D2777", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679397, "uuid": "eea3aeab-d891-4e0f-a75c-45b77e210fc1", "value": "a81c2e23bd7add892483dd1cc3490827", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679397, "uuid": "2434b513-eed8-48ce-87a3-1b1867b15c89", "value": "6144:XzjRW3JIfxe6GOfiHNgR5286a7YCENu9sqscfBFzBoPQmiT:jjAJI83Ku8nE/DogC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718679397, "uuid": "ccbeb12b-758b-456b-9064-7548a91ac93a", "value": 437248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679397, "uuid": "b37cda10-b6a0-48df-b0c6-39b173371353", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1aa7fb2a-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718682715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682715, "uuid": "d5851aab-9a94-4fe2-9431-4acff37cbd02", "comment": "Malware payload (RiseProStealer)", "value": "1815121e32593359ae9a9348286e4c8f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682715, "uuid": "2a3d11bd-3648-47cd-ac33-e40d1ad6d566", "comment": "Malware payload (RiseProStealer)", "value": "b101aeaa048e6454d49b61474f97c9710dac8c856b306085fe62c3c2cfb6840c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682715, "uuid": "e2f84d70-dd87-4eed-b8be-db0b2a944f77", "value": "T1545533BC960BC550DE2536FA83CB199E9DBEF6449A48601327EB476A4C78C8C5F318", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682715, "uuid": "50e91451-063a-44c8-b491-ca0c9609e7f1", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682715, "uuid": "3fee5762-ba80-4346-aee3-15793a99026b", "value": "24576:6+Bp89Lo0zUMpz3jsZgilq45gwQ5RHW/nSfmv+nrSU5kHOs0XP:6spco0bVjsW/8gl5R2/SfHmakmP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718682715, "uuid": "5e9bc0b3-97e4-4794-a4a1-39e9efb216b7", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682715, "uuid": "55b56f6f-25ad-42b8-a8b9-5dc931d013c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23fb35ec-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718682730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682730, "uuid": "62ebb10c-0cc6-4376-a679-557ad1ad85f5", "comment": "Malware payload", "value": "ecec88cbec67541a42cecd000bc01935", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682730, "uuid": "cdb481fd-0dbb-4dae-aad2-ee75c7b6229d", "comment": "Malware payload", "value": "ebdfaabb5b40e410955555b6ec5957f1604416f2334f635a5d0a8b7d3ffb667b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682730, "uuid": "f98f74e6-6b37-49aa-9673-cd1b281705ee", "value": "T16245BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682730, "uuid": "3c96d181-cade-4ce7-906c-4e65837353a2", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682730, "uuid": "0c36a6f6-e020-41bd-9e1a-cce2dd306bda", "value": "24576:FqDEvCTbMWu7rQYlBQcBiT6rprG8auh2+b+HdiJUX:FTvC/MTQYxsWR7auh2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718682730, "uuid": "7d2362cb-3c67-4552-af31-f8ad26562f3e", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682730, "uuid": "00ee0801-bcd4-4164-bb06-ea836b608ed4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dec0cf40-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718683044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683044, "uuid": "4e0306ae-c933-481a-b5c3-91c2f9aaef1f", "comment": "Malware payload (Amadey)", "value": "1f09897f6c386d03c9eeb57347378fef", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683044, "uuid": "db408cc8-c3d8-4b1a-8122-f98d3e739286", "comment": "Malware payload (Amadey)", "value": "a8a3ba24e4da5a962e4bedf0781c00c04e5b6c6d478b2818f8f77fc8417b639d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683044, "uuid": "c062f1cb-7046-4273-a6fe-0e32c19f4d10", "value": "T1AB9533C7C98F9CEDD9A7CFB256F70E2CB23910563E08E991899B6A52FE177924C341", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683044, "uuid": "197ccf80-3bae-44f7-ac98-06dd80f243cd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683044, "uuid": "6fd49170-88ad-4059-b77d-1b1387305f21", "value": "49152:vWl0dlkBJCb8TxnFoJBy80LYI0Q9EhgbgmGwY:TmJOQoJBH59Qmn+Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718683044, "uuid": "63934b4c-e101-40cf-bd0f-9c07ba5d90bc", "value": 1885696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683044, "uuid": "9c2a2e61-73fc-4a65-98a8-acb1e3740ee6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36f5faa9-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718683192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683192, "uuid": "976cdd5d-9126-40de-a4f0-45f5da57ebf3", "comment": "Malware payload (RiseProStealer)", "value": "043a76a2a7d72a1e6a361b16a400f3de", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683192, "uuid": "690be9c6-d306-4b99-842b-16f722617962", "comment": "Malware payload (RiseProStealer)", "value": "666cdff886c7ec800bf324e806d2d745faea98783c0bce5a4448d2564ed789cf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683192, "uuid": "6ba54a55-c322-4735-80e2-5694e8a3e499", "value": "T18B5533F8434FAB65C03EE1BD0AEF12815DBC7CE440465B34CE1FE6A094596AF9B919", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683192, "uuid": "3945a4de-cadf-407f-bbb8-e60b43e77c60", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683192, "uuid": "b2879e1c-5731-4450-867c-193fef03e8ce", "value": "24576:4XVUGDnVH8EG7SoE9RmX1EKiHb5AC1Vw5mwQkN2K3yWds0JkKyVVrUvW/Jvnm:f2VcEGY9RXF91Vw5mlpadsLzga9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718683192, "uuid": "7cba3010-31d9-4459-a071-395586452325", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683192, "uuid": "7a22603f-f465-48c7-b963-dd2c154119d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d733ee90-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718683460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683460, "uuid": "0d0ca476-d92f-479f-be30-a90c469e3f26", "comment": "Malware payload (Amadey)", "value": "7fa81d64a03fdf176d5cd1306c35f7b4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683460, "uuid": "e8b20ed4-d882-4775-901c-64c9b1b4f79d", "comment": "Malware payload (Amadey)", "value": "4abab1ff40c03f898ec57eda60777821b77e24fbe517ae9c3ca9f331bfae82d9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683460, "uuid": "26e4146d-d981-436c-9634-81bb4992ec1e", "value": "T1F59533967B60D510D547047F2D71BFB87C6983E6CE58BB22FD2A5A32321088B6427C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683460, "uuid": "e9a0a6fc-d1d2-43c4-84e9-0ae729eb8d6b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683460, "uuid": "e3a6cab8-7813-4ca2-b13b-38ae6196a884", "value": "49152:nmxzt0LaArWI6sovBZ80mdIvBwk1xr3On/8w4N3CeRb66RT:mxzfArJHo68LreD4N3HZJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718683460, "uuid": "2fc659b7-e182-437d-a135-4b1306d65c4a", "value": 1934848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683460, "uuid": "3d3af332-8813-4eac-8050-a516f3900eaa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c1a3570-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718683576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683576, "uuid": "a6de2585-04a7-457a-8282-51b25caf6df8", "comment": "Malware payload", "value": "f11907d0de0afdabd5824c6d221190e7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683576, "uuid": "c713d50a-d6ba-44d2-a1c8-acd924a92b23", "comment": "Malware payload", "value": "ba392ab01bf358f06d6b2ed174dbccf5de6e1135eaa49dca606f3a133b6252b1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683576, "uuid": "41a6fb0c-5493-4b0c-a2b4-62996460ed09", "value": "T1F0159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683576, "uuid": "f3a3e7ec-0998-48d3-9c5f-19a078c78669", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683576, "uuid": "448691d9-c6e5-4e27-a2da-5c37a077683f", "value": "12288:ZqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TP:ZqDEvCTbMWu7rQYlBQcBiT6rprG8aAP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718683576, "uuid": "3517730b-d6e5-4372-af6b-d08448c78eb5", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683576, "uuid": "24ea3f4b-4547-4fb1-be78-67b953bf6736", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c1b708f-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718684167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684167, "uuid": "05cccd9d-f4b6-4792-93e0-f844752fac12", "comment": "Malware payload (Mirai)", "value": "03fd1bcb1eb255ebac53ceedfe9a3edd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684167, "uuid": "81d3a642-7d62-40e4-84ca-d70dfbd2d044", "comment": "Malware payload (Mirai)", "value": "9c0631d44ff3ddc80cbb7dded1d384e4856eec992ab8caac8c78503b07587548", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684167, "uuid": "2ee6259f-60be-4ccd-8247-75dcdc9cfd0a", "value": "T13CE3F845F8914B23C6C222BBFB5E428D3B2A17A9D3EE72039D256F20378645B0D775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684167, "uuid": "dabe56d2-aa7d-474b-b161-7f75314455d4", "value": "3072:S4ckCt7Q92mNCGOLBFb4UJvVSHpbck03Pdty:S4c3tIxCGyzb4U+HRX03Pdo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718684167, "uuid": "c27a87e8-9b3a-4dd9-86a7-fc6e8108c324", "value": 154336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684167, "uuid": "e289f758-7396-42a0-9814-84ef1d55d972", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684167, "uuid": "962d2c26-61a6-4aca-ba91-515ece2c610c", "value": "t1cd219e38eb550bac67c49785115f203eeedf34dd1e3114da9bbca34a419b9c6b2190", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0caefc69-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718684409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684409, "uuid": "19a087d7-0d7b-4251-8d50-98cbbb037607", "comment": "Malware payload (Amadey)", "value": "fdafb92fc1868e533daa18f318d8e322", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684409, "uuid": "f25d2310-d556-4a15-94b1-caf76a640acf", "comment": "Malware payload (Amadey)", "value": "20c1e1afe90bdcf0f52211ad57c0b44bf2657eee63057b503ca6f3efeeb9a828", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684409, "uuid": "ad38731c-8b2a-4eba-b6fb-44d09b31ac92", "value": "T1F0B49E1272F19521E6B74A31CF38D2A427FFF8B26D65A34D22445B3F0BB16A1B6523", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684409, "uuid": "9313f8c8-b669-4c71-bc9f-14003b238185", "value": "d9461cba2555202112b06a068732496e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684409, "uuid": "9b98fad4-5a06-449c-b052-b4cd87fb82a8", "value": "6144:5pPjLfMHsP9QLw5bB4DOmfG6i2wGWPgEammKW4g0l6zkLL3QxWP1IIL4qb:5pbMHwIwt0XG6OPg/mmSFl6zk/gxoIv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718684409, "uuid": "81d03daf-9b4f-466c-bc17-8a8b79b48ad7", "value": 500224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684409, "uuid": "f67cf633-f64a-409e-abc8-87f9e5b5808b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc487ec1-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718686046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686046, "uuid": "233b0b1e-7045-4480-833e-7341a55f96f9", "comment": "Malware payload (Amadey)", "value": "9a6ea8820572e3de05475d8f4a0c70f4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686046, "uuid": "93723c1e-c074-43d4-b4dc-6580c61b0bcb", "comment": "Malware payload (Amadey)", "value": "30cf9fe4662e93bb06270023ab15706202059f2d81f7295018fe8813c8d60ee5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686046, "uuid": "9e78a699-376e-4de3-b04c-ebe8b47b38ef", "value": "T196B49D52A2F1EE1DEEF74B324A34C1A4262FBD225E76524D31743A1F39732A08552F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686046, "uuid": "0cf79c89-ff70-4f34-9b05-ad52bf2507ae", "value": "4b38fcad9893deeb968aa54fba49d7d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686046, "uuid": "788fdefb-c176-41c5-a9cf-95c51ed5c84d", "value": "6144:hLkRRmpw7HM/auvHb9K/SsUXkbDK0HnWyTQJEx5dMJkBlsHFA:hQmebM/auvHbk/S/8Bn7EEzdMJS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718686046, "uuid": "7e1d5b3b-216f-41ae-ab1d-08521064332a", "value": 504832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686046, "uuid": "d2946630-15da-4306-855b-a0c68a61e297", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b6a7d5-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718686219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686219, "uuid": "94c264d0-6e04-41cd-9902-6ec4fc51c7c6", "comment": "Malware payload", "value": "dd16621278f122ee003f21178fa6a19a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686219, "uuid": "3cdbd13c-8201-465c-9caa-1726a45829c1", "comment": "Malware payload", "value": "71fdf52e0965678483f89ef07e324576d62a773c2bca2557efa6d14a7f763870", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686219, "uuid": "098aeee5-1f96-4c11-8c9e-11ee3a97bf16", "value": "T182365B65BD5EE462E6C833783B7193D4323EBC489F4192235610FFAE99F67688F121", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686219, "uuid": "6981b234-2fc9-4962-be1d-8085fa1c4bbf", "value": "49152:7H+5dH9Zq/34LCFNoUAFKVCsn5EN2q3OY2NXxB1:r+5dH+/34LCFNoUTVCs5EN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718686219, "uuid": "cf15d4b3-25c2-4927-9d96-f5bdb3986ca8", "value": 5177344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686219, "uuid": "13fe8d44-9c84-45ab-a90f-469aac5ae596", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "635d056a-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1718686273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686273, "uuid": "984c72d8-8044-43f8-955c-eb93291bf7e8", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "7079cbf6ec23668cd6049eb90d57ea44", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686273, "uuid": "e7277602-0894-4606-a562-17d898bce06a", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "f3bf67c085a54d6a030bdd34a9676514ddbf773a317f2fdd9953fa393e593528", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686273, "uuid": "b9719b56-3e60-4d56-a964-e938ae1d1d63", "value": "T114E4CF9262F1AF74EEF74B325A39C2A4262FBD251E72614E32747B1F39331A186117", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686273, "uuid": "4210d1e0-79d4-4c4c-a957-6131e623a220", "value": "4b38fcad9893deeb968aa54fba49d7d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686273, "uuid": "e495062f-af97-400d-b660-bb779830a15d", "value": "6144:yLeRrKV1IhNvlrM0JCSNslbPB7OYynjabPkb1/GmaM8PLDcACX0N6WfwsHkXFA:y4K/IRM0J9Wbp7Olj6PklsM8PAc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718686273, "uuid": "841fb259-7e8f-48f4-bb89-5d37ebf1d051", "value": 658944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686273, "uuid": "40e111e8-7084-4d3a-a5aa-355716e4fdfc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d20ff869-2d2f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718686888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686888, "uuid": "1c42f66d-dbc3-4fed-b298-abae6359db10", "comment": "Malware payload (Amadey)", "value": "55357ac5eb4798c8502f5a18a2a5bcea", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686888, "uuid": "4e3d05a1-20b5-4f4c-bb09-576da72a84f8", "comment": "Malware payload (Amadey)", "value": "31ec8eeec18bf30f766e8ec4bee91883c8df96f23242c6831221d356cc922bfd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686888, "uuid": "f039897c-571c-4e76-8962-1b5f348a557c", "value": "T1D4853384BB37C63EC171A37DEEB513483971AB4C25892809D88E77946D0AD360EEDF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686888, "uuid": "c69ca252-fdc7-47f0-ab9b-ce2c0b90d3a3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686888, "uuid": "98c51da6-8467-40d2-8b2c-6c2fd0bd4462", "value": "49152:Hfcn/WHQHMl+sbNrHYjoksIVrdJ6b5vMDRr9r:HpwHMl+s5r4UMrNRB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718686888, "uuid": "84d04ead-7cc8-4080-8de9-1fc185a5f96e", "value": 1871360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686888, "uuid": "ee6fadce-b8cb-4116-bc8f-b08d1b3ea510", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00952bbe-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718686966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686966, "uuid": "496ca126-5163-4e8e-b932-47c85fcb136e", "comment": "Malware payload (RiseProStealer)", "value": "efd4f1bc6747653d9c8e05cdba9eace1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686966, "uuid": "c511bce6-bccb-410b-9815-4280395e193c", "comment": "Malware payload (RiseProStealer)", "value": "058184a0cd9fc047f9bb241d52e91289e9b35d3af00567a338820d8094393f65", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686966, "uuid": "2fb405fb-136b-4c12-950c-f659ad34e1af", "value": "T1A55533FA14DB4E22C60175F949DA32D9C7183C2AA900F946372A7684DCF54EF67D28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686966, "uuid": "9ddac301-3081-4c4a-96be-8c78e9cffae8", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686966, "uuid": "61d69b1d-25dc-4212-9f1b-21d502e4d34a", "value": "24576:Rcv0+C6J4Z24Ay/bof3Afx0Irb7E7nP9wQe6icoEC26YbmNrU7lDg:Rk0vI4Z29uu3A+IrMb9lNoErSgpD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718686966, "uuid": "ee50ecdc-a2ff-424f-9fbb-efcd5431e838", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686966, "uuid": "26a483a6-9859-49a1-ba1a-90cce680ba52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01678a01-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718686967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686967, "uuid": "9d55afdc-df38-4297-b3a2-39fb3cc8c06c", "comment": "Malware payload (RiseProStealer)", "value": "cdd10cfc3216b9a67fab0738cfbfc8f9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686967, "uuid": "beec988d-6966-42fe-88e9-ca30434e64c7", "comment": "Malware payload (RiseProStealer)", "value": "274e53f5a2d3b2b3ed83f02b45c9d2e0a8e363e4b46ec11ccb9ad1f890fa9d86", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686967, "uuid": "7eda9944-7146-4cab-9bb3-1e98c5ef07df", "value": "T18C5533F9040F8D11D191B8F1AEB464A639ADF6ED6E8DFA15931F5029003C5DD2B3A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686967, "uuid": "675e1fe0-dea1-474b-b751-c0fc3e6541ee", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686967, "uuid": "86233fff-cbe8-4602-a4dd-5537adfc9b1c", "value": "24576:G7gv+eBBX1sAzHNDIjfSpES+A51mpLwQK6icoECY4SLm8nZIUDe:1v+eBF1NtsjfSpr5spLl5oEp4SLHK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718686967, "uuid": "06e5e4b1-95c3-40b1-a685-48dbd550bb58", "value": 1324032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686967, "uuid": "8354609b-d290-42bf-9375-68b8062c8fab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "452c8c5b-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718687081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687081, "uuid": "cfce05fb-82b4-467a-93c2-755ddeb74d47", "comment": "Malware payload", "value": "d35d2095bcc11773dd7c57175bff0274", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687081, "uuid": "b8561f95-c6c5-48e4-af09-e4e73fe0c1b9", "comment": "Malware payload", "value": "efca6db065fa9b93a3358bcfa85fb1fa933f32a4afb595c09ac361327dfc282a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kaji", "colour": "#8bc459", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687081, "uuid": "159614ad-448f-43f7-add1-c4c890d1d02e", "value": "T1BC364A10FECB54F6D5031D3044ABE2AF67316D064B25EB83EA047F6AF97B6A51D322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687081, "uuid": "ddebc950-48e9-4804-9bd0-e6095fa28cde", "value": "49152:E33d0lGt6UHcFL7Rn2o03wiEhiDmzzd/9sARlBs/00Cpfx9a9uNpp9hW16klbU6V:E33GlbU8FwmzzRDZ9meqRV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718687081, "uuid": "496a744c-b15a-4471-b9d9-149dc6485f18", "value": 5251072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687081, "uuid": "5ac0cc19-f9b1-4a2d-bd1c-4fea44e40871", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687081, "uuid": "e368778a-9cd4-4e62-a37b-ee2bc9b086e3", "value": "t1b9c2ce73199da8fc67f0851387ab7120cfe6e03726d0297159f6b8c0e673d53a6268", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6195d976-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718687988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687988, "uuid": "c3be8a80-9e95-4f2e-ac41-8695acc4dc10", "comment": "Malware payload", "value": "4f8fd0be0349d7cec98fc18cbc3c19d8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687988, "uuid": "11c6257b-d6f5-436a-a8b5-362d6c380d85", "comment": "Malware payload", "value": "d65cde4b93fdcdeb785ea7030a3402825361053c3ac8ecdafdd381e190d3f6ab", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687988, "uuid": "388d4169-7640-429f-88a6-9e6c6ec86fff", "value": "T13E159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687988, "uuid": "345959ec-16e5-4bec-9cc2-2f81b7d7e6c7", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687988, "uuid": "09a7d9ba-ff1e-4c8c-8d7e-f21409e6493c", "value": "12288:SqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T9:SqDEvCTbMWu7rQYlBQcBiT6rprG8aA9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718687988, "uuid": "aff6eca2-c044-4b75-8f1e-765822eeb789", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687988, "uuid": "47da9e07-bba0-4217-9012-6fda83430754", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63969ead-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718688287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688287, "uuid": "d1aa1bb1-df54-46fd-b90d-e330cac599d2", "comment": "Malware payload", "value": "26f3fd555cf225ebd2241555979f57e8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688287, "uuid": "5af56c89-ec94-4731-aa42-687bff38633f", "comment": "Malware payload", "value": "795768bf9a3e2c9ac41c7ecd4d43cf71f64cde4313c0f95889a78d6c291203b0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688287, "uuid": "9035f874-9d15-4eee-8818-ed06c9b3f2c3", "value": "T13245BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688287, "uuid": "05d48801-9fb4-49c9-9bfc-742529bc4af3", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688287, "uuid": "9336c254-056b-4e5f-9a59-f4fba7a08108", "value": "24576:4qDEvCTbMWu7rQYlBQcBiT6rprG8auS2+b+HdiJUX:4TvC/MTQYxsWR7auS2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718688287, "uuid": "ea5d08ea-aa2f-4a07-b4be-94ff1ec057a6", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688287, "uuid": "467cd7bd-f5b3-4b92-8679-c51ea0f07a2b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89203bbe-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718688483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688483, "uuid": "361571d8-829f-4447-81af-45e6a6a6edc9", "comment": "Malware payload (Amadey)", "value": "b862cf3242422721bc8b414dbb2784e3", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688483, "uuid": "58cbcaf1-787b-4dae-8e39-0ff238e30a9c", "comment": "Malware payload (Amadey)", "value": "af3382208fc9d1f221ec51f3a7bd0fd2b55861509c7e3b7b4c50f18a6d6ae2f6", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688483, "uuid": "f4fc61a0-e287-4acb-928a-64bf60353672", "value": "T13795330289560B40DE802D3A8F87A961973ECE7114E92A68393C595FCCD35DDFA9BE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688483, "uuid": "0c61e631-60d6-45b4-84b6-3b27eca7960d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688483, "uuid": "081686d3-afd8-4c4d-8f18-64d8e3539981", "value": "24576:tJBi+V1fc0iOwDji+PPnn42LXNMoE+pZjlVYbxzbflu+Ee5C8NV+lNd0KcMsSVs9:tGA1k6wC+n40rUVTrC8NV+f0K5V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718688483, "uuid": "ed082895-17c4-4edd-85e5-6338e4abdc96", "value": 1898496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688483, "uuid": "6f79efa1-2b99-4a11-9c7a-bdb285bbcaa1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ca4b579-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1718689160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689160, "uuid": "956dc342-e071-4c6f-9b3c-66af25ef9167", "comment": "Malware payload (LummaStealer)", "value": "62f6b1b690de53936d1836efd967be1f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689160, "uuid": "d26c7c0b-6037-4952-b1fb-d85c47f05e2d", "comment": "Malware payload (LummaStealer)", "value": "afde8d89a8480d6f7c1548a29d947748b0a9d029287fff32e36758f879b2ef3e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689160, "uuid": "8fcb9248-6e4a-4fa3-99f0-dc670c331625", "value": "T139A47C9262F1AF1CFEF747325A38D2A4262FBD225E36524E3274361F39732A185527", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689160, "uuid": "3b836cee-b32f-46a9-a302-fc8173cc7ddb", "value": "4b38fcad9893deeb968aa54fba49d7d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689160, "uuid": "a8c0eda0-646e-4357-8f34-0b8a98f97aee", "value": "6144:mLzhR3kAKt/0LGOtHBvQRGcP5OvYmRGCKnMyLgmZgwD6ai0MGFA:mH7kVJ0tBORwLRGCKnHgwD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718689160, "uuid": "cb64ec56-114e-476b-aa75-1445af0c4124", "value": 455168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689160, "uuid": "60c0f427-bddb-443d-a41d-150698b58bd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b7421ce-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718690984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690984, "uuid": "840863c4-5b10-41be-ad3a-16af9d0167c7", "comment": "Malware payload (RiseProStealer)", "value": "0b1e103954d548c038552f0f7ca05b44", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690984, "uuid": "1ad42e65-d3c8-4461-ad5d-3776a2c0b9c2", "comment": "Malware payload (RiseProStealer)", "value": "2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690984, "uuid": "affeca17-9ef9-49c9-96df-20870ca8c3ab", "value": "T14C5533BE117BA100C7F8FCF9907A14B029647C9E3450EA5AE76F5A950E285FFAF901", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690984, "uuid": "b682cab8-2a39-4eb7-92ad-cb459a6fbe8e", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690984, "uuid": "92c7259b-7566-4feb-9b47-ef7dc6e535f7", "value": "24576:K5OjvoNby5WcISAAlPvKTaBmXGD6aWvalwQL6icoEC5hD3F89hbmSK:Ljsy5nISpPKaBsvallCoEQhTYbm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718690984, "uuid": "a58825e7-4523-4cb6-820f-326e319e9d98", "value": 1324544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690984, "uuid": "fa5a2811-f35a-4a76-af77-fa3e8ff71e9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "952d3d57-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718691940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691940, "uuid": "9cc74b85-671b-4f64-9362-88c297e4c4ec", "comment": "Malware payload (Amadey)", "value": "e57fb0e1f4bae86d6715f0c0f0494f5c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691940, "uuid": "4ef93e0b-5f2f-46a7-a174-4a2cf13e4e8c", "comment": "Malware payload (Amadey)", "value": "44ab5e6a8f3711137610a5e0f0fb1199f16dd6bb2b04814439edb2ffce6bfd84", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691940, "uuid": "7d29c2d8-3b22-403f-be6c-58cbd182f4cb", "value": "T12F95335916F9B171DB3DC27E1283523B3C39BE86BC629A04F60CBC71DA57B13A4746", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691940, "uuid": "b466934e-3e35-42ab-a743-d123bf610669", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691940, "uuid": "289b5a69-a56e-4136-8784-9571e9f67c35", "value": "24576:Qvc+FpeMEeI0SGr6QM4x0wg3v9vqokPlc+u4sOny8AH00qsgbWItQ59YVvJ3ij8f:QvcMwmFWQMrwOCny8AZIQzOFH1vr37y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718691940, "uuid": "e35b080e-77b5-4a50-b565-7482faff87f6", "value": 1938944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691940, "uuid": "ce3add93-6a25-4a08-aee1-a2b5867b3d2d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b314bf76-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718691990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691990, "uuid": "a9635aa6-94de-43ed-96c9-f30e780b86f5", "comment": "Malware payload", "value": "2f34918db36b7dfd559510d80145d9cd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691990, "uuid": "7f45d755-aede-4d62-bae0-7ea943cd9fd2", "comment": "Malware payload", "value": "67a0b9766a5e480a3bcadad7fdc6c2513b3544eb19ba90a1fd9c0ca8ff975a7d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691990, "uuid": "c01dabe1-775b-4f57-9e42-bb455ca0ea05", "value": "T142159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691990, "uuid": "266613ca-a320-4e32-83ae-f6ff622cbf36", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691990, "uuid": "e319905e-37e3-4e98-b391-c5564241e595", "value": "12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T1:JqDEvCTbMWu7rQYlBQcBiT6rprG8aA1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718691990, "uuid": "96453756-3d6b-490d-be06-f5e900114d4a", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691990, "uuid": "312eed3a-3fc0-47ef-81a8-bed6dbe42fee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "043f8174-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692126, "uuid": "975ddb52-eadb-44db-99aa-fac6a2019647", "comment": "Malware payload", "value": "91933a5a8691f29886c5777d509be653", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692126, "uuid": "abd076a0-a6f4-485f-b0cc-7910e3897bfa", "comment": "Malware payload", "value": "1520cd319db75f759bc4f825f39af1c59578e163e35ebf02a59a9647cdab0fa0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692126, "uuid": "3de0b277-0658-4051-9d2e-cd5e6b51d966", "value": "T1EE45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692126, "uuid": "d32447cd-9640-404d-b50f-18d7a0889dec", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692126, "uuid": "b0a931aa-ff34-4409-83ac-e88214a5469d", "value": "24576:wqDEvCTbMWu7rQYlBQcBiT6rprG8auL2+b+HdiJUX:wTvC/MTQYxsWR7auL2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692126, "uuid": "c7888c17-3c5d-433d-a8c3-5b1aa69970c4", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692126, "uuid": "5f7f196e-c8ea-46ef-9027-2a3c2bc64e94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cb6b319-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692328, "uuid": "09d4d2b1-ce5a-45f2-bba7-2d553ff507c3", "comment": "Malware payload", "value": "29184015457c16d44fac338906edbb33", "object_relation": "md5", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692328, "uuid": "ac320a59-3301-4506-86e0-18333652ad7c", "comment": "Malware payload", "value": "a93b25f17ccdc6f0f25a01f2ee673198cdf3183ab0c9aa3cd380646d74eeb884", "object_relation": "sha256", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692328, "uuid": "65471987-9e99-4b44-b4a3-bb67a8c2c12f", "value": "T13B31445315625DA8CDB6FC398B07A527E9E830403B78AEAB47D1CC64A727E14563D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692328, "uuid": "f617eca1-7fa6-427d-abc2-a2f696ab9c45", "value": "24:BDHKSLQW8laS8VWj/zBELxwtaKB5xxrDNSv7NtX+t10KgkSWlBu:tq85wc+/dIkzB5H9Svn+fTPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692328, "uuid": "3dc50537-2a62-4876-8738-18abb526819f", "value": 1448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692328, "uuid": "963c2159-cfd7-44c9-8ea4-5b9473ea30a1", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88b0c2de-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692348, "uuid": "1300b657-0de7-4a44-8204-b99c075bceec", "comment": "Malware payload", "value": "ab5d9bf4126b9b7908105bfe9efe3ce0", "object_relation": "md5", "Tag": [ { "name": "discord", "colour": "#5a4135", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false }, { "name": "pwd-7JKL-2ONE-MNO1", "colour": "#ED2441", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692348, "uuid": "9b057da5-ddc4-4e9c-a88b-e0d802268f5b", "comment": "Malware payload", "value": "4f154da515e9c9e262bf7c9ad8bfbfd20f8ac8103b696113d8c7d5fd8fd7d497", "object_relation": "sha256", "Tag": [ { "name": "discord", "colour": "#5a4135", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false }, { "name": "pwd-7JKL-2ONE-MNO1", "colour": "#ED2441", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692348, "uuid": "e7cbfa8e-a923-4bf4-af5c-f1243e9c2ace", "value": "T12308333BC38DA5378B2446BD45ED98D38FF4CA73B9D690BB540A15EDC0D02EC26692", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692348, "uuid": "0a01ecb7-f628-4835-914c-4358a81e47e6", "value": "1572864:mzmZbSSryvitfcZwJ5OVbW62z5yjOMMVXSwV6Pe0FrZJ4Elsn47Yo:pll0ZwjBXzHphSwVLPEl7Yo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692348, "uuid": "0890e952-d8b3-48ab-b998-29addeb2329e", "value": 77748806, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692348, "uuid": "6e414919-bbd2-4fc5-8bd3-b6f22de6c33b", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbc972b6-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692434, "uuid": "2ec09e05-c711-41cb-bd97-d00b43d36bd6", "comment": "Malware payload", "value": "50baa759d9aa27bf70af9186d509b6e6", "object_relation": "md5", "Tag": [ { "name": "discord", "colour": "#5a4135", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false }, { "name": "pwd-beta", "colour": "#04262c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692434, "uuid": "c7324a38-b7de-4f85-8a46-f157fd22483c", "comment": "Malware payload", "value": "cb2b7416252f7edb6329e3e81d075dba44db3af556d2ff122485cfe57dee25ab", "object_relation": "sha256", "Tag": [ { "name": "discord", "colour": "#5a4135", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false }, { "name": "pwd-beta", "colour": "#04262c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692434, "uuid": "ab6db294-8081-497d-bda9-07363e3f02b6", "value": "T12408335691132061BB3B2D77617F83F65B16E89D0FD64BF4BBAA30C24DA6209D8BD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692434, "uuid": "132cc3f7-0ad3-4a73-9a55-66af9141f661", "value": "1572864:8z+q8I4e2P5D/6grk5gelFYS8jIdx2PbybnGwwePehy8VvpC:q+q8IyPp/6gWlqjI2PbyaMEA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692434, "uuid": "7925eba4-b25b-44dc-92d7-6b0fc6d31b97", "value": 82985122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692434, "uuid": "66f33f4b-e7c2-498b-8130-bf26360ef446", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9e84369-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718692511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692511, "uuid": "ebe95513-d059-4bc6-b502-b8f8e97373e0", "comment": "Malware payload (RiseProStealer)", "value": "2e757042fe98ce0c6de2759491f1fe40", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692511, "uuid": "0a252ae2-e022-4448-91a7-6416c8454279", "comment": "Malware payload (RiseProStealer)", "value": "911f5bdf7c312a8701bd9d7d4673cfee9b6b1bf3c2f390a1d69e94edebf5bc4f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692511, "uuid": "a83cb392-f1e3-4d3e-8f13-c9343d3cda25", "value": "T10D55333E02239650C93167B927DE0EB4BF6D3D8553683B60146FAAA65400DFEFBD2D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692511, "uuid": "47656ec1-ecd4-4754-85fa-18ab33a91d59", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692511, "uuid": "4ec34ea5-a11c-41e2-9138-fa987f33e2eb", "value": "24576:wwRgDfhanNZqQ/qxDTQnMucr55E5RKTuwQDRHW/nS+y/ZbmNrUITCI20fF:RMfsnqQ/qgniUmTulDR2/S+y/ZSgITKa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692511, "uuid": "a0f9b343-6f37-4232-8701-7b333087fc1f", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692511, "uuid": "bab931db-fa6d-406f-9e2e-c61b7781a379", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d85a0d6-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692598, "uuid": "8a8dd661-64a8-4c01-b897-16a11677837c", "comment": "Malware payload", "value": "ce6a82beb0713ec788b936c155e01845", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692598, "uuid": "a24153bc-cf6f-4c9c-9054-96e3222e39ef", "comment": "Malware payload", "value": "1d9c231405c00dac71b3b25bd241f0323f11ab2dd3d08843fc5b5164264dfafc", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692598, "uuid": "d4e58af3-43ef-4d30-954d-a16adf0a4e08", "value": "T1A04733D6F59F22DCF3CE16B60091A77D0563D8BED12AA3D38A84435EE053306A4589", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692598, "uuid": "5673d0b9-4b5e-4911-8aa2-6f030102c24b", "value": "393216:nY/ZciDmOgUn0ucCPqNC6fT2m3+NCMZat+2XWj4Q6W3LV67u8Ypjx3jdbKOfOyR4:Y/RyNUnzVsGNCMUoHJF3oCH9xpbKgOL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692598, "uuid": "476e26d0-321c-4b19-8738-9131208d4f50", "value": 26683044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692598, "uuid": "7006b91c-f6fe-4047-8f16-febd8909d6c0", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "437ffc27-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718692662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692662, "uuid": "61811266-2717-4beb-a7f7-451ac6513b3e", "comment": "Malware payload (RiseProStealer)", "value": "eaeb97136749e4deaee312e528bf9779", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692662, "uuid": "e0549d56-ff36-49fb-8ca3-6ed105619a76", "comment": "Malware payload (RiseProStealer)", "value": "dd436ab0298af6d6491b71fcdcfa96c0f9249c9f0963ca250bab44fe59e9d5e9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692662, "uuid": "c67cf7e2-d1ad-4a7d-8875-f10b6c3193b8", "value": "T1EE55337C33F256B1D51CF1B65AE521D61F2DFC8A6D24BA10A12F145898B04DF8B3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692662, "uuid": "c6eedb1a-84b1-432f-ba6c-4a01f7f6c69a", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692662, "uuid": "db7f28bc-4f4b-426e-b5f2-68339f7f630d", "value": "24576:44MnURSHdqfsriJw2I4d9MFXdYM5ES+EnElDXUwQA6icoECKjOwrwTZbmNrUeks5:TGBUVC2Vd9MFXdY4EVEnkzUlnoEbrwTK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692662, "uuid": "448e36ed-87cf-46e8-b261-e4713f6f72cc", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692662, "uuid": "4c00c682-494d-41ee-8d0e-97aeed38cf29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "841a7208-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718692770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692770, "uuid": "d9be5323-b993-49d7-a5b1-1a121e06378a", "comment": "Malware payload (Amadey)", "value": "3c791a1e752923485b04c0a6b8ee4198", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692770, "uuid": "7c2ec033-94d3-4c3b-bad7-eda70d39c99e", "comment": "Malware payload (Amadey)", "value": "9a42c088e4e3639c2f2894d9bd698c356f6ac40b0bac816a6bad1c126ca90658", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692770, "uuid": "5769b246-b499-4036-ba88-2abb663e1095", "value": "T1AC95336A7CF37D07CA85CA721BC71F8519F1EE4104CEAE749709273E69EA1ACDC912", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692770, "uuid": "a1b4e748-1008-42c1-b5b9-6be6528732e6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692770, "uuid": "2d6d7a7a-553c-4516-baea-2b7be35cf3bb", "value": "49152:tEglGOP94VaT4Vcf8LSC1GpQX0PYSm6jhrEm:7uG4VacQhRm6jREm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692770, "uuid": "75962a90-4494-4ff8-b95a-05942e65d58a", "value": 1915392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692770, "uuid": "e77da9fc-29af-4db7-8d95-d78b7c58e544", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9adb5904-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718692808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692808, "uuid": "bd33dc41-8055-4481-94b6-e4c66ece8d70", "comment": "Malware payload", "value": "da0a4a7b3c9a7137f697715e62a4c9d1", "object_relation": "md5", "Tag": [ { "name": "Fake-Invoice-Campaign", "colour": "#76fb8e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692808, "uuid": "ce9ccda9-1ec6-48c1-88bf-7f87d4bc1fe3", "comment": "Malware payload", "value": "93a7511dcc6d33b7f628565f671e0b76956f0e6a3e8d6febab26219601e0f97d", "object_relation": "sha256", "Tag": [ { "name": "Fake-Invoice-Campaign", "colour": "#76fb8e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692808, "uuid": "ea93c6b2-d205-4bc8-ae38-e5cd393c7d1c", "value": "T12B41122117F16365E3B78B751CB2E2519A327916EE019F8F0354809C9DA1B20F8B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692808, "uuid": "bf66f710-eb41-4a09-b45a-0704b5c6e8d2", "value": "24:8XwXmGnvC1JDvqswCK4IWulODzJBWkp+/CWi6SV6qIGhSCFUMkW6SCJrXZO4I0Wg:8MmGnQBy44aJ5fHoIAqGKpa5OwGPV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718692808, "uuid": "5f88b259-bbab-4695-a03d-82dce45f34bf", "value": 2281, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692808, "uuid": "3fe17af3-3336-4f97-b1f9-50cc69437677", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40bc6f1d-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718693086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693086, "uuid": "af18959c-82a5-41b5-935e-af9ec8283d35", "comment": "Malware payload", "value": "ca1519b85a1e3f9e38b2f99b3a992908", "object_relation": "md5", "Tag": [ { "name": "Fake-Invoice-Campaign", "colour": "#76fb8e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693086, "uuid": "7c31d14e-a894-4cd9-97e6-2a7d338de4e2", "comment": "Malware payload", "value": "b3bd59b6cef98f2f9c9a8a51e7163cb11255eafd45cd9a79a11c619d9d940907", "object_relation": "sha256", "Tag": [ { "name": "Fake-Invoice-Campaign", "colour": "#76fb8e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693086, "uuid": "bb60119d-73eb-4670-a5a0-54b86720108d", "value": "T10D111F132C4B73B008A113E6483CA3F4B1469A9F960038D73BF0DD96648E7ECD7801", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693086, "uuid": "83756691-cef0-434b-a756-99e3409fcfc3", "value": "24:weSMh73iwNyI7MbJ0zOkb8OKPCZHm5KvGEKtjsyv0FOZSMh7iiwN/E:+o3iwNvMlqr4hCZHmIvrmjsyAHoiiwNM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718693086, "uuid": "ded3e1d6-69c5-407e-b134-39c625a3c856", "value": 1072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693086, "uuid": "755e2f8c-ad6e-4ffd-9bc7-deb7e85ee29a", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a9cf876-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694069, "uuid": "f1055133-4237-43fc-944b-7b9752ffddf8", "comment": "Malware payload (Mirai)", "value": "e44fc59ea5043eb4cc47dbe4888a5f09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694069, "uuid": "af61e30f-1cfc-4691-b67b-3f37873a2fe5", "comment": "Malware payload (Mirai)", "value": "85ae37504bf2854e9ada98102e861b9226b5890f77a77433bdd4c0947bc838be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "dc033ddd-931b-47ec-a052-348f2e682306", "value": "T1D2335BDAB5029E7CF95BEB7F84224A0AB531B75251830B3B13ABFD936C321585D13D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "3256f367-4d1d-4f95-85e3-d6de9eca253a", "value": "1536:U7v3qPDK6sIMb7wMEG+uAc8DQpEkYByB6f8MVP:7sIUJEl1Ep4ygVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694069, "uuid": "f41bf721-64b7-4e7d-9a6b-44909c0c0693", "value": 53144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "e6d37212-fcc0-453a-8f6d-408871f3d9fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aa94b9d-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694069, "uuid": "0c28c864-03c0-4b22-b614-3f5790628b8e", "comment": "Malware payload (Mirai)", "value": "4ddd776abc70857e3b4a6c3e0dec74eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694069, "uuid": "cc00a98f-6055-4d71-baf6-793e38eadd98", "comment": "Malware payload (Mirai)", "value": "2b314c753066f0d87b50578268994db809420385a943de11539a2cc1f2a14325", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "f841adc9-26df-4ee1-87c4-dfcd83d9324c", "value": "T1B3339D73C42EEE94C1584678EA215D785B23F001969B2EBB5F86C1654043EECFA0E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "93e7b34f-b75f-41c0-a1f8-49133ecad458", "value": "768:h/nDyTXv/5N9lP4wanwtOj/eSD1eblf6mlRu2nRmaC7oTVVaWCCYZ:h/DyTxB4wanwtQFO6aCaTT+WCCY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694069, "uuid": "205589b8-24b5-49d7-a09d-445dcee3d0d6", "value": 50488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "380207d9-e1ee-4adb-bc77-bc623b48c364", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aafa7a8-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694069, "uuid": "9ce19e22-c465-41a6-a22c-6502ed79b3dd", "comment": "Malware payload (Mirai)", "value": "54ee01014fcce925567c0649a7fad948", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694069, "uuid": "92c91654-0544-45e3-b078-96e3ebc6ee6c", "comment": "Malware payload (Mirai)", "value": "e87d52ee2a88699f99b66d065cda7054de5f1aff8312671a5aab377b626dcef8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "6fcdb805-9573-427d-977b-891336cfe094", "value": "T19563B6167F250FF7EC6FCD374AA92B0525CD640A21E9BB367934D918F24B21B09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "08e2a546-49fa-45fe-b4f8-97e7cd00c7de", "value": "1536:2xyAkcGGxRX5OHDMGVK/7HvBbFIJZQXUb:oyAHGGxREHD2FI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694069, "uuid": "1dffaa79-98ad-4fff-b522-de06baeb71d4", "value": 72032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694069, "uuid": "c0657a37-2e4a-4fd2-b7c8-04ddc53fc391", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ab976c7-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "a25cde02-46ff-4a8c-beda-6ce85944a0be", "comment": "Malware payload (Mirai)", "value": "e0b61ae08a62b184c3710d57c5db6ac4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "c88990d1-8463-4006-b478-fae82d542105", "comment": "Malware payload (Mirai)", "value": "e64a199122237c90d713b5f04d729660fa7329ef8b17c952059ee4e2ef189ee8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "5bd5d6c1-20a7-4fe8-8857-48e8755a3196", "value": "T122731AD2A743CC7FF96947B88A624AB427D105AB25B6D5D3E32D3A0D0730281592DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "fba24d97-64fb-45be-a956-6522907d2f59", "value": "1536:RKX+YOW8f3zoL8H48wjzDQ/fPwheDiHuACTJhq2J85dOJKV47pHRY8brCv3rSQwQ:0uA8f30RDQ/fPm8bXc4s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694070, "uuid": "60e1bb55-55ee-4f98-b68b-362086a826ff", "value": 78504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "3e9050ab-1d35-4fdc-a3b7-ac6c9c41a8e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ac1b9c1-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "a7678c15-db6c-447b-8d92-1149fcaf7ce0", "comment": "Malware payload (Mirai)", "value": "ba1fdf88fe92f3f24264da5578bdce58", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "54e05aa0-d5b9-4dd4-9365-d2742881af8a", "comment": "Malware payload (Mirai)", "value": "bd821742db4a4a2a074e54fc3ecced8638d92ac2570c6b0d81eabfebe133539c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "3e5b8024-f182-4532-993e-2b7a7643018a", "value": "T101B39D8BFB0B1591C86287F40BCB5BDE3A232212AF67C8E72D1E257D09791DE49067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "a91d5414-61a2-4eea-b926-0204086b3e3b", "value": "1536:G4XU44E0b6CqubQpekvlVvYGBuXeJbgS/LWS:GKU4v45ApvXYGoXeJbgSq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694070, "uuid": "3df4224c-a5dc-4cc3-860e-c7c3084b06e3", "value": 108120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "0af559dd-ed22-47d7-be31-f445adba0503", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ac417f9-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "09e743ef-44bc-4f0a-ae2a-f4dbd4da8f96", "comment": "Malware payload (Mirai)", "value": "66e45c84389c3ce1f1756be81d085e89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "925965ad-708a-41da-8c89-4fd8f897fa96", "comment": "Malware payload (Mirai)", "value": "4f5ee9be1965163c7f013404706ddaf44a192a8be2174d04c62fa550168fcb25", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "0ab767ad-4ce1-46c9-9d6b-9609ec3ee101", "value": "T153334C02761C0F57D1A65AB4263F16E0C3FEADA420F4F688250F9B678675E36118AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "3357f2a7-ae14-40a1-96ae-ddd6a8b728de", "value": "768:+5K4kUJUSxs9m3pl9lliy00gIWazRL6PRO/On4DnQCQi61/gBhkiADLmfiv:T9qA30gjWEBn4jEpUhkzDYm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694070, "uuid": "195b745a-a90b-4d37-b3ce-33115c2a7f27", "value": 50652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "e75365ff-148b-43de-955a-13c0f37b98bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ace98ae-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "3a7f35ef-86cb-4473-9697-f3e30a1a2444", "comment": "Malware payload (Mirai)", "value": "d3831bec76de5119c6d0eb141feec832", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "62db58ae-72f1-47ad-8c76-72822e8fcf8d", "comment": "Malware payload (Mirai)", "value": "e0275413980cf20f3c432d4dcdf46f19586cafc0e2791f12e1a383349b578a9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "60d5f4f6-8228-4c09-99a7-de7c7ac44bed", "value": "T185435B21B9792F27C0C1A8BB21F74768B3F65B4E25A8CA4E3D620E4FFF2458025571", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "de2cd27e-ba8e-4b56-bbc3-b61970ad7e56", "value": "768:hSDc7SGRotq9J5OCUHHLapdNAj1SW/LO+/aDYgpm3f:hXSGRYSJICUnLapd2j1b/Pb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694070, "uuid": "aa932b0a-397f-4175-ace5-2a87ebb90cd8", "value": 55264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694070, "uuid": "c26578a9-93f2-4013-b82d-d6ef1e47ca3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8be11957-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694071, "uuid": "6c20b4a5-c0ed-4c2f-8bd4-65bd704e32fd", "comment": "Malware payload (Mirai)", "value": "40a73ce6b18d2e15ef53814b9a33b88f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694071, "uuid": "69b2df69-bca7-49f2-8efd-f175782ea575", "comment": "Malware payload (Mirai)", "value": "bfb591e6e761d426a9a07138f6d64328b6d4de4afa67fdb02ecc7098cde0671f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694071, "uuid": "14c97263-8991-4717-9c52-ada42696f5d5", "value": "T1B0630985BC818A11C5D813BAF92E118E331367B8E3DF7222DD116F5077CA96B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694071, "uuid": "ab07c520-2486-44e0-b02f-2f3da10b7b2e", "value": "1536:X/nCMLbfn8yLJuuKUlcXAElKBNJ5NBBxziI5iO2NPG1j:aMLbf31uuflAATNJMNPG1j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694071, "uuid": "de5d57fc-c81e-4fe6-b31e-29c52a0e506b", "value": 67184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694071, "uuid": "1ac96512-dd75-4531-922e-238ce3a52b6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694071, "uuid": "c21c15f2-05ff-4efd-affb-8978ed0cc6fe", "value": "t1dd1190215f1c2e9c2bd48144926a8b1f95dd35b467071b15ef7e268f0b57c913c1b4", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bf63271-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718694072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "a23110fc-e9b7-45f5-b372-63795674c3c9", "comment": "Malware payload", "value": "347f0acc131d75644822199da3940e56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "eb9d7c43-420c-4814-914b-c92fa9e6eb7d", "comment": "Malware payload", "value": "fac48f10edecdd314b26037a02807fb56ba6cb0e3e6476a7e06c06c20c969c78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "e6f83803-f6be-4f66-8907-f01dcada86f1", "value": "T1E933F741BC819613C6D4237BF96E40CD332667A8E2DF7227DE221F11778A82F0D6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "47fbd739-d178-4a78-ab7f-4b523ac25140", "value": "768:Xn8tLm8o86DFDXxTlttNdJ099RpdUlUBXsEgJh4GkVqIBNOFBhpVgyz6E:yLHGDFLxpJ0zdUa1sJ2JslBv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694072, "uuid": "c97b8f32-bc86-4aa4-a6c5-4ada262436f6", "value": 54588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "5d9e7275-ba59-42be-86ec-54921d54b568", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "52888aaa-bd36-4c18-93f8-464cd47ae3b5", "value": "t1f8316a998e0c1aacabf1c345168aa21999ec31fc231067addf6e339f07164d2779f5", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c376633-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "b3981cbd-0ffd-415b-b3ad-015c6a66e5c9", "comment": "Malware payload (Mirai)", "value": "59ceda1eb5275bb16a64b18f77dba1c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "7c775761-9585-467e-b60d-039b7ad1d3c4", "comment": "Malware payload (Mirai)", "value": "051013c4e477d35e81b84fe0e7e3a5ea70cc4e6491a3ebcbe28abc2d70523cc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "47956a8f-4d7c-4d04-84b1-74f7326e5c36", "value": "T1FE3318C0F68B85F5D90789305167F23FCF31E17A80B192AEDF5A9F39DE6364192021", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "cfaedb55-4530-4ef7-bd96-e34c10e959a5", "value": "1536:63YTgiGz3ReR9IA75iOK0TLDCKXFWAC4XFazH:63YTgL3ReRiA7EOjaKXFWBl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694072, "uuid": "0608f73d-48b0-4a6e-bc95-ff0ca3ef020a", "value": 54384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "cf430a17-f02a-4250-b4f4-01e8ccaf704e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "75535357-88f5-4d92-9cf0-24ed6dc46419", "value": "t1761126f71e7749f4f3e92841c72f5790165ee67b606433e08263c9501691ee180b6c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c41ff77-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "c3aca0e4-ffbe-4a6a-90c6-a17d7e1ab97b", "comment": "Malware payload (Mirai)", "value": "d224a1c6f9ff0dc006cf4a8c6208897f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "4b7888d2-b9a3-4d65-8b74-fb4cb0ac4bfa", "comment": "Malware payload (Mirai)", "value": "8af8a8c1fa49ec80f3d57d8f5b511e455d615738071199931459294bd6a40356", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "c2dd1c75-d322-4b87-9f30-5170f51bde7d", "value": "T1C6332807B485C0FDC289C67047ABB53A9837713E123DBAE77BC4AB136D45E206E2D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "dc319406-1416-434f-975f-3f4b9c205eb6", "value": "1536:TABNYAHzjTtIOEF//pUSDFJXJ8IgtQkXix:UBN7zjTN+//yyFJXJ8d3ix", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694072, "uuid": "be6cf6a5-704d-49fa-a525-80e947907b55", "value": 52224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "4c6f9849-d9d1-464f-be36-82affa203745", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "b7e4e2ae-734d-49f0-85b0-beec2c58fbeb", "value": "t10f01d474758f0de0b0f7b622f390e0611ca02eb915ea37d2d5347db886627930db08", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c4c147e-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "eded70a5-78db-409f-87e2-888f0393c9db", "comment": "Malware payload (Mirai)", "value": "7cb041b242e90d1106775c7c3159fb16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "c29e3340-af87-4723-94e3-917649fcc7d9", "comment": "Malware payload (Mirai)", "value": "b5d0972f3a3d66d91dc3f4f14e61d28c27b0458d7e9b701c607999d3f0b272df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "4878b1a9-25aa-4722-b656-f6d14aca7427", "value": "T14863A70A6E61DFACF768863547B74E21964C33D626A1CA81E25CEB011E7034F745FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "085cf778-76c7-424c-a124-ad28bd11c0d2", "value": "1536:WfC69XTpvJZrCJBWejrpjrwmjrHF3umRXNIsm:eCcpvJZrIBtumR9Tm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694072, "uuid": "d49135d7-cd3b-4ce8-94c0-3c97161f1f5d", "value": 67936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "3af0d911-3d48-4821-9674-c25e7c4371e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "3cdfb7b9-a72f-4527-b007-9706c8081d93", "value": "t18a011218483817f093854dde6bedff75e45190df9a161e378d50e99aab21a468d01c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c5ab0e0-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "72401224-68ad-4e8c-8033-d11fcbaf8ae0", "comment": "Malware payload (Mirai)", "value": "de1e111d46503a13156b9d9156d78897", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "ee327e90-ccd0-4047-9c53-f9606779dc4b", "comment": "Malware payload (Mirai)", "value": "906b79cdf988555cc23fe83e9fe9c46d77dbbf3c2104f8d36ab78bf850f14775", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "018f4ab9-5b20-42bb-ac90-024b538f8d62", "value": "T16B331841BC819613C6D4237BF96E41CD332663A8E2DF7227DD222F10779A82F0D6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "3dd3a5cb-4cc0-4c4c-bf4e-b3f32d01bfe5", "value": "768:Z+ppHBNEXpGBzZyScj9p6MqY8ZuAyxUKYOPQYfFArcPH6OBNOFBnDPzozCc:y9z5BVysMq2AyOzA+cafBg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694072, "uuid": "36c7dd22-5277-4ff3-979d-26b3f0b884c2", "value": 54588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "c5c9cd68-bfef-4e7a-b6a8-aa5dc4fb524b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "42d122aa-df1e-4cbf-a3e5-743ed3ab55b0", "value": "t15c31bf6d8e0d1acc6bf0c34949896129cafd35fc13116b75cf5e339b46428d136ae0", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c5af9a4-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718694072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "65d9ac79-3ad9-4894-a951-7d071ed2167b", "comment": "Malware payload (Mirai)", "value": "798d65fd9f1b46d0178200e4dcd31bd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "e1886c4c-52ea-48dd-b152-ad7ee2a8fc72", "comment": "Malware payload (Mirai)", "value": "6329a11df9fc2562b099aafbf3a87e2419c32b548ad612dbd9a2d35eb72ab85e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "f7bc44a0-090d-485a-a493-7d15697d20cf", "value": "T1B6236BC16543EDF4EC5606752273F7326B7AF43A108DFE93C3669A33A882A41E5072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "dcd1cb1d-170c-4df7-a566-4b58bd779940", "value": "768:692+wWFc9ArpaVS9k0uFcJVr5aAE761MgnJgodd0B0a6Xk:r2c9ArpaVSm0uFcjoAE761xtdd0Bz6X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694072, "uuid": "bd3f8b30-5d59-453a-a68a-2fc0d4bfa717", "value": 46960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "78eaf3d8-9192-45b9-b175-34815386febb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694072, "uuid": "f2e548ea-8c72-4d3e-9a82-3a4be68c0595", "value": "t1b3112b9f0c7b08f873e4a842d3533af2596ac5370660795945b20dd463d1ce1c17ec", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9024c18-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1718694147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694147, "uuid": "92e5ffc5-b4b4-4f89-a832-6b6e160a1e67", "comment": "Malware payload (Socks5Systemz)", "value": "2760555fd2836cfe0c7d86c4ff6a3824", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694147, "uuid": "09d03443-3e40-4495-a0f6-5a83e5690dcb", "comment": "Malware payload (Socks5Systemz)", "value": "3cf3c817f000ee878d038af444af027369bd2a027dd2cfcb91ec367703ba08ee", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694147, "uuid": "ef4c7801-6785-4491-9094-88156019c006", "value": "T15926338561CE4AB0F413ECF00920DE9F5672F71BD47D94663668A58CCEE3188F528B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694147, "uuid": "0b203f0f-4fcf-43f3-b30b-13168ebb5af0", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694147, "uuid": "0da82c0b-01cf-478f-ac54-efa7dd8c3dbd", "value": "98304:md/xWP4RcT5+VY1to2kxxDukzv3jjdK0uF77Vx25XM5RMRqUq:C/xg48gVIJkDDuk73HdCVVeXM5RtUq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694147, "uuid": "cfa17b5e-3d23-4587-8ffb-e8442a819ca5", "value": 4861319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694147, "uuid": "70a00b4b-fe3a-4b82-b8dd-5ad9cf299db6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3edba67-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Sliver)", "timestamp": 1718694219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694219, "uuid": "9acb45e2-8412-43c3-b9c4-28f140c989b3", "comment": "Malware payload (Sliver)", "value": "7aa7b56906d8d579cac0bd55b2142a5f", "object_relation": "md5", "Tag": [ { "name": "Gost", "colour": "#9488c2", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694219, "uuid": "339a36d6-b94d-4ca9-90d9-37f5cbd35108", "comment": "Malware payload (Sliver)", "value": "d00833318a04caa019c6f95dcb3598ad947d405010bfb2f3cbd04530a00bc3a4", "object_relation": "sha256", "Tag": [ { "name": "Gost", "colour": "#9488c2", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694219, "uuid": "89e6a00c-caa3-41a7-a464-346df39a9f76", "value": "T1A9C63A43F85191E4C5EDE170C6669253BA303C885B3123D72B50FBB92B77BE46A7A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694219, "uuid": "17af8dad-5b6b-45a2-8297-59ba9c730807", "value": "ff9f3a86709796c17211f9df12aae74d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694219, "uuid": "3444e41a-0016-441c-adee-7837c0ab4827", "value": "98304:zWIabdBQhDi5REnjL21NTP65SExJLpuO7W/4hRfEcHzjF9KXDXuq6PFGrTkJSZZ6:zWDBBQpiHkP5/xJL8Oe4hR44", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718694219, "uuid": "f7337ae6-5046-4a95-a5df-7ceb8866b467", "value": 12388864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694219, "uuid": "eb270abc-47c2-4233-afe0-2890e6fb0280", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6947d73-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718695512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695512, "uuid": "084cfa92-5441-49af-a4d8-5e9f16653568", "comment": "Malware payload", "value": "3445e5cbc4f883d4c8db25e193ad30d2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695512, "uuid": "c6789d1d-88e8-4e4a-9b42-5f50fc740baf", "comment": "Malware payload", "value": "9a388d2527a40b8c46df38ab7e9d756862c6b502ed45b4008838ad5b192878b5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695512, "uuid": "cd4d3472-efb6-4e4d-8a3b-c3751ce0fca7", "value": "T106159D2273DD8361CB629133BE69B3057EBF7C6546B0F95B2F882D7DA910130226D6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695512, "uuid": "fdbb3a0e-4e1d-4da8-8f61-a473ed80395f", "value": "5405ad0c6ec36ec4edf07d66fcb3fc73", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695512, "uuid": "b9c0bb27-7102-46e8-b6be-3f639066d94f", "value": "24576:12rT5JibBsR1YAcUSWcPsPQcVnJtCaR+Eo:spJ22R1rcUWPsPFVrCaR+Eo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718695512, "uuid": "21ab20f7-1b5e-46c7-aca0-c6685d89cf47", "value": 907264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695512, "uuid": "54c8c71e-eaed-48c0-a937-e9ffc7ee1bd9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea31be77-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718695518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695518, "uuid": "899eaaff-4106-4ffc-bba4-74ed59300167", "comment": "Malware payload", "value": "6754696a342ef288c4eeac34bddb1ab1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695518, "uuid": "9ffe4a0d-b513-4b96-be2f-b7849b21707b", "comment": "Malware payload", "value": "a3b20bc63a13150646e6a017157d7474308fbd486dc7d4a4f4ad82add6df5353", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695518, "uuid": "a49e968b-8ef4-48d5-9f75-fac024217a6a", "value": "T13EE5333237E0D176D59200B096FC9BB9F9DAD238569646CBEFC1282FBD126E1C7123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695518, "uuid": "7d9411ec-92c6-4604-8039-16b5bf677d7a", "value": "3eaa732d4dae53340f9646bdd85dac41", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695518, "uuid": "7907a6c6-8304-43a4-998f-32454bd24597", "value": "49152:sX5HBBR/vNPOZv6vRtnEHelFT3UGyezo3D2/PE8lIWtNiTbaxNU46G53MT23oBDj:sdNROkRBEHel1U1/To5cfyB6Gg23ESMZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718695518, "uuid": "93542005-7c64-4ddb-8d6f-3780a4819f75", "value": 3207467, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695518, "uuid": "1601c208-c0a2-4db1-92fe-58bcbe438df6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed0b2cbf-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718695523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695523, "uuid": "d42d6b2b-01c0-40a8-8a8c-7744c2daf8b3", "comment": "Malware payload", "value": "f41b9a03e2cfb311197ac247e4e4416c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695523, "uuid": "8fb56f7e-ae17-4881-b901-b6a1464f9c64", "comment": "Malware payload", "value": "6605ff693d31043cb623dcfce19ca65ca7584569f1e2e4fa67f551e08c8005d1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695523, "uuid": "cee0ed65-270e-4cc3-b7a2-41390e7a075e", "value": "T11A253902638D802EFEDE7132CE5EE27146786FD54027B53F1298396DF9F0163562A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695523, "uuid": "2a6d3b8e-150b-4e68-be04-065b3bebda91", "value": "f458f28101a4ef5e8bfb1ab96455dfde", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695523, "uuid": "036d10aa-bf62-4366-891f-e5211e600f35", "value": "24576:+XU09t8XLX8hf6VAYCG6WouT8wat52YHPT3:+EutzfsCG5h9at52KPT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718695523, "uuid": "157ac977-f4d1-4534-b200-ea878d50c570", "value": 1017344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695523, "uuid": "cab9126a-6e67-4885-bf9f-8c204a1b5fa9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06a55546-2d44-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718695566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695566, "uuid": "65b6198a-cc27-4ba3-85a5-5be48a9d9cf4", "comment": "Malware payload (Mirai)", "value": "2a978dbe111e819ee69c770d4a618bad", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695566, "uuid": "1441ceb9-12b5-4b96-b979-f3ccef901391", "comment": "Malware payload (Mirai)", "value": "14a11457f4ff849ed40c2ae0078740f02cfbb7905ba98b7898a56b5f778c5cc3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695566, "uuid": "3f9d0db6-029e-4643-8237-55a01d4d0e4c", "value": "T1B1143A46EA414B13C4C72BBAFADF4245333397A4D3E773069928ABB43F8679E4E125", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695566, "uuid": "43b96f45-c709-49d0-bb98-66488940a2af", "value": "6144:Q43T3hgAve1ABavXksxMbcVYY/KxtM/RxH7TJxA:Q4D3hO1ABavXksxMFNxW/jJG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718695566, "uuid": "03117d6b-e576-475b-bad3-754fa7759081", "value": 204204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695566, "uuid": "85623b28-8291-4a9d-9356-2cb4dbd11865", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695566, "uuid": "465f9ef2-17c3-48bc-9a19-785ff5c2346a", "value": "t13831ed658b75062a59a1dd68c8eda7a2552d8b136344fe33df31c4cc240e48ee63bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0afaf06a-2d44-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718695573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695573, "uuid": "0a79ab16-6d9d-4638-a2f6-4b2fd5532761", "comment": "Malware payload (RiseProStealer)", "value": "4242c28a69aa4a7ff3686dc4fe8fb285", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695573, "uuid": "4a7f17b9-a172-4f41-8260-65cff769400a", "comment": "Malware payload (RiseProStealer)", "value": "ac356daf5618a7ba0557cce9d6fea1c6459ddd8c85990ee85a7d010273674e8c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695573, "uuid": "114ffdf4-9426-49d7-a620-f6ee6cabf1f0", "value": "T1545533B624BB5B19C338B7FAE2A40152FE6D7E2C3A969D47319F19C10920C4E7F653", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695573, "uuid": "4c3de474-c9b9-4495-b90c-d4cb171a4fd3", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695573, "uuid": "e129ecb8-5d15-415e-aa6c-dcb36828bf9f", "value": "24576:HqKyIB1snsH6XX439ZPHDCySTv3/OSNpUEwQSz+82lXfe796mKn:HqKfqa6Xo39ZmySTv3/J6ElSmlWBKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718695573, "uuid": "9650c8b9-f725-4ad8-9611-deeef5eccc3d", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695573, "uuid": "3b1e0190-7eca-40b6-a985-5f0f09434532", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0a6d4bf-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718696254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696254, "uuid": "cdf6f25e-cee6-41aa-9906-fe259fdb3c7f", "comment": "Malware payload (RiseProStealer)", "value": "b044b35c7a7b17bc02da7949ec91d825", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696254, "uuid": "1c26280e-6e31-478b-b1e1-309333ba53e6", "comment": "Malware payload (RiseProStealer)", "value": "064acd680c81e7262f11026720cdf976b1dbc822046e47d4b81540391a4f4a9d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696254, "uuid": "149c9c88-59c3-41ae-a7b5-3954c7b58007", "value": "T1715533BF92BD8C80D2F9F8B10876645E43BCB98975447E46F69B29800D751EF8729B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696254, "uuid": "536c024f-fa64-41f4-bbca-dbe8cba5823e", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696254, "uuid": "3e66461d-471b-4bd5-a726-a6dbeb2dd158", "value": "24576:eNEra0bZbADPhJnz/5MbXt3hgBMxwQE6icoECqoYnQ3v0lHt5ih:CEe0lEDDzBMDt3hgBMxlboErTQcHi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718696254, "uuid": "ee27ad80-d2d6-40f0-92a3-3f262029ffc6", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696254, "uuid": "09461621-0ee7-4fe4-8dd6-04c56dead471", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd6ecf0d-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1718701585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701585, "uuid": "6c8a60f4-5fc3-4b55-be5a-9a7f1f71516d", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "46c1acadec10ab43c117863ea3f34741", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701585, "uuid": "9c5cd535-6a38-4488-8eb0-4cff97b20f43", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "00755191ff97be4876582ebec46b61465e81308629cbf9bbbf4c3c172b853815", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701585, "uuid": "6cb89808-0e3a-4130-b0d5-d90184e62f40", "value": "T1E3E4CF9261F1AF11EEF60B324A39C2A4263FBD621E76524D31743B5F39B33A089527", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701585, "uuid": "980e6e64-6f49-4e56-b877-3417dab755fe", "value": "4b38fcad9893deeb968aa54fba49d7d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701585, "uuid": "71a17f02-5a96-42ef-a704-012116242a0f", "value": "12288:uu8X2P3v1VPnEN5oGj3N1xQPVBm3svA1jBZQ/u1plSXEl:feQfEXxfxQtKsItBxvJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718701585, "uuid": "3d5d1a73-f39f-4b9e-a0fa-db7846a89c1b", "value": 659456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701585, "uuid": "8fb7880b-471c-49b8-b52f-912032aba7ff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f62a4639-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718696397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696397, "uuid": "bf42c176-4d0d-4bc3-9587-2bd4bcd8685c", "comment": "Malware payload", "value": "12da8762b31c130b45a8d39b2b6218d0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696397, "uuid": "933fc436-14cc-4598-9815-302159e775c8", "comment": "Malware payload", "value": "a887c551b6717da905c8c9d70e300a6583d009db9ad9295f63942e61fb74d3b6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696397, "uuid": "2d6676e2-98a6-4bd1-8f2f-922e780c78b8", "value": "T138159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696397, "uuid": "450f2765-0f11-4b27-9de8-655a4e2bd827", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696397, "uuid": "6a103bea-9f9a-4d34-9e3c-dd92db98b02b", "value": "12288:yqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T1:yqDEvCTbMWu7rQYlBQcBiT6rprG8aA1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718696397, "uuid": "70b19c0e-0dce-45b7-a1b7-7f20869257a2", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696397, "uuid": "14dd4fb6-5eab-45ca-8816-bf083bbc07be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2168ea40-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718696470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696470, "uuid": "c7b23222-a5ee-4da3-9776-21edbcccfc2d", "comment": "Malware payload", "value": "87ce94b4c8fe4e1aa01d520ecca75978", "object_relation": "md5", "Tag": [ { "name": "Fake-Invoice-Campaign", "colour": "#76fb8e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696470, "uuid": "8e6fa376-0c7e-4192-addc-d0150b204bbe", "comment": "Malware payload", "value": "5a8782eecaf54aead50dd5515eeac6e82759f5d41ee5e18e8b3668ca89809059", "object_relation": "sha256", "Tag": [ { "name": "Fake-Invoice-Campaign", "colour": "#76fb8e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696470, "uuid": "b41ecc74-cc6d-459e-a8d4-a1a8af6baed8", "value": "T1AA41122117F56365E3B78B751DB2E2618A327916EE019F4F0354809C9DA1F20F8B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696470, "uuid": "ba7bb70e-9a30-4d35-95fb-3ba7726b3968", "value": "24:8XwXmGnvC1JDvqswCK4IWulODzJBWkp+/CWi6SV6qINkSCFUMkW6SCfZO4I0WvqT:8MmGnQBy44aJ5eAHqIAqGKpa5OwGPV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718696470, "uuid": "32874707-11d6-4b54-b04b-08a72dbdd728", "value": 2281, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696470, "uuid": "8a18f413-b8af-4368-b6ff-d19bd711b14e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "327b916b-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718696702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696702, "uuid": "ff5e52a1-5ca8-44bf-bb06-592cd8648910", "comment": "Malware payload", "value": "485673cd656c36fb6dcf4a9025803e18", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696702, "uuid": "6a7195a6-e151-46e0-8fe5-3ac02be1b516", "comment": "Malware payload", "value": "a6e81915b0dddf0bd702548a632e1bea467709b354a17e93358da52e030fcc88", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696702, "uuid": "c0df7145-9aa6-4479-9d97-658a9b3f6d06", "value": "T10C45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696702, "uuid": "0584cfe4-69c6-4206-abf4-4e394938c6ca", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696702, "uuid": "9242b049-2c73-4cf7-aba0-27c4888fe7a8", "value": "24576:CqDEvCTbMWu7rQYlBQcBiT6rprG8auC2+b+HdiJUX:CTvC/MTQYxsWR7auC2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718696702, "uuid": "f0c33d5a-8570-4aea-8236-59df2adaee25", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696702, "uuid": "8de8a2f9-0b3a-48a8-a658-90bdf19f8491", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0655408-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718696683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696683, "uuid": "aceaaae9-0d07-4f45-99c6-7232ff28e928", "comment": "Malware payload", "value": "bf91607f0bbfb74837def23513b9ffbc", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696683, "uuid": "bc6927bb-ebdb-4bad-9b26-a471e9e50c4d", "comment": "Malware payload", "value": "d58eec17b6a63f7e60444a9948691c006ebea1174cf3f1eb3ea997518cf4d821", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696683, "uuid": "6f88773f-0191-4ce8-8f7a-564d4a111cdd", "value": "T143A47C82A2F1AF10EEF74F324A35C2A4262FBD225E76524DB174776F39732A185127", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696683, "uuid": "7626dce1-71d5-4a02-b7f2-c6ec4b8c24aa", "value": "4b38fcad9893deeb968aa54fba49d7d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696683, "uuid": "5986c889-2805-4f61-9318-a4e06eba1efd", "value": "6144:vL9BRXt9o7N7LJ9IoN36ABzil0jdwHBcK1qmFSUrMRs3BWA:vBrtu7lJ9Ik6Atil0ZwHBcK19F7o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718696683, "uuid": "c702739b-3897-49fc-b307-b4e816baaa88", "value": 455168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696683, "uuid": "afbc37ff-0ced-4e2c-86a4-105a1694cb83", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a984205f-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718696698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696698, "uuid": "ddb8f5ce-b296-45f2-ac22-0db7a1817774", "comment": "Malware payload (Amadey)", "value": "1596ee7e65daddbde81639b512266192", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696698, "uuid": "dd68ba33-8110-4e6f-b989-2608b6af0a2a", "comment": "Malware payload (Amadey)", "value": "7ec77d0583d16a39eff4b8b3896e819e18eeef8d28ecdf762d54e4e0f2178b90", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696698, "uuid": "77b972dc-b476-4562-8f05-d7f4382057a5", "value": "T1188533624C701B6ACFFA25BB89F5AC0377501B5798AAD97E1D8B28702F80F2517C27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696698, "uuid": "fb92a942-753b-4897-88b3-439bc0747db6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696698, "uuid": "17e4a026-47d7-45f7-8291-1bb69f20d7a1", "value": "49152:zLgCPy85pJ3D9cVzHZ16fPikGwfe+ZLF5+:nPZpJ3KV+PbRecLF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718696698, "uuid": "836c1804-21b3-47b6-855f-3330d69df038", "value": 1858048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696698, "uuid": "994b46fc-1fa2-448e-a10b-f409c7430726", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6c30f82-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718696747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696747, "uuid": "4677fd22-07c6-49fe-abe3-dae21ed1ecf8", "comment": "Malware payload (Amadey)", "value": "d29281e018d65bfa32ce438793eb3946", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696747, "uuid": "9ad9d2e5-349b-465a-81a4-0c6b0eac11e1", "comment": "Malware payload (Amadey)", "value": "3de0a4c58ecb7054430465d12e60d994b6a98047decb1b4241bb72812032ce5d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696747, "uuid": "f4cfdb74-6a2b-44a2-82ce-a8e5059a7e76", "value": "T18E95332E11CFF26ACAAF8239359F1303493FA955EBA1957BD321A1B121079C7B44CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696747, "uuid": "af6593c3-3c0b-4e9f-ab0f-d44f01af8321", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696747, "uuid": "a8992eb6-4aed-4f79-9103-b3cbcb742183", "value": "24576:MhszjQCVRN8hoVF8ZxeG3BuiWkxAjpuVO8j4gZ6P3YEozPq8mc/zeH+j1vDUmcpL:4spKGsHeGxxWJj8VO8Ms6SPDe+j1s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718696747, "uuid": "7402919c-3209-4c5e-ab3a-32b2c0e28a3e", "value": 1923072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696747, "uuid": "ec6526f1-ce8e-4c5c-9103-6aff4c974468", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c889c232-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718697609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697609, "uuid": "92c36b3a-5b0d-4046-9fe6-816dc7353330", "comment": "Malware payload", "value": "5f62712b112eb6fab332ddc3637faa2f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697609, "uuid": "bb5cdd34-2d0f-4765-92ad-a1875669e9a4", "comment": "Malware payload", "value": "db5cbeccfdffa87a995fd7b4c1ba3195cf891d051b636838fdc00f3395cce536", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697609, "uuid": "0ff650b0-2255-4fc9-917c-d5ffff118cca", "value": "T1F8416AD7609507F36CD0DC3332796880F6D8919694CAAF07ADDD7CE448BEDEC69846", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697609, "uuid": "c128fc3b-d152-4f47-b210-55bcf7eb990b", "value": "48:vsd8jDttQdMqYBRf78T6eCKIlLL1z5NKIRxIT:vsd8jDttQdMqYBRf78T6eCKIpBz5NKIo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697609, "uuid": "bcf2994b-3b7a-43a9-9d5d-31adf17bb6a8", "value": 2072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697609, "uuid": "6e748213-5bb1-4165-a969-3233403b9552", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd345978-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1718697617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697617, "uuid": "c55c670f-12c4-466f-b459-27347725e919", "comment": "Malware payload (Gh0stRAT)", "value": "39d865aa4171442b417c40479e63a03f", "object_relation": "md5", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697617, "uuid": "8851f739-4139-44e4-b41f-be2c5407c38f", "comment": "Malware payload (Gh0stRAT)", "value": "0e4db144b872080e865f2ce5d7dc2edeb47eb304d109c3f16c82c04ce626644f", "object_relation": "sha256", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697617, "uuid": "453e7cf3-bacf-4564-b191-14687e545723", "value": "T17FA4121275A0E431C0933A70A8BADAB05F257C7226B5C59BBBE026357FA07C05F7D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697617, "uuid": "43c699b5-f4db-48f4-8bd7-895f87970af1", "value": "8216626f230fae173fa22074eefacb8e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697617, "uuid": "374377f9-e958-42c6-9160-287da89a598f", "value": "12288:MykIP8aYKbeqA1UtLD45VZ3Mc2YpFjW8D:MKP9YbiR45v3Va8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697617, "uuid": "d3fcde10-5870-4230-bc41-da12cf9c6458", "value": 454656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697617, "uuid": "13b8b9b8-f8a5-429c-8a46-24c0b88258fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76d3feec-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718697902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697902, "uuid": "e4275fe1-e6ae-41d0-8598-69cca6c1ec84", "comment": "Malware payload (Amadey)", "value": "728ac983b3d598c434e474b22e5f6df1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697902, "uuid": "ecbb7f20-c454-40ba-b54a-8751ce78c602", "comment": "Malware payload (Amadey)", "value": "99f09a45cf4cffb7ed9989c1ed6345b9f5f3616bd3a66e3b9cca3ce337599680", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697902, "uuid": "b1c30a18-4070-48fc-a66e-5600af2a0130", "value": "T10FB4AE52A3F1AF10EEF74B324A3AC1A4262FBD625E76526E3174361F39332A1C5527", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697902, "uuid": "6ac86f5f-0aba-4093-aa74-e7a2f24d5b08", "value": "4b38fcad9893deeb968aa54fba49d7d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697902, "uuid": "5d5c3b55-a85a-4703-9368-03d55de12ffd", "value": "6144:0LxRkGrD5CidU8pMB/DySZgfrUUvk++KIfYBYsW8kWA:0EGP5o8SBWSMU2kB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697902, "uuid": "abc7827d-d2b6-4eb4-9420-5fc864cb28e5", "value": 505344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697902, "uuid": "c8186538-20f0-4a15-83b6-5b31877311a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a11c3e02-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload (MimiKatz)", "timestamp": 1718697973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "b2ca5a26-2c75-4396-8550-3ad800d445e8", "comment": "Malware payload (MimiKatz)", "value": "ddff4c5edeb4f3933cec125c283d5527", "object_relation": "md5", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "12172ce9-2363-4538-a607-a2467caf2245", "comment": "Malware payload (MimiKatz)", "value": "e7aaafdf56e6e66296a849d026cb39b0498e26d8f0e3d9f69d3db8b01186505f", "object_relation": "sha256", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "2b4756d2-1d3b-40c9-8f63-5be4d3b09d5d", "value": "T1FF45335B666BD02AF84D79AC6CFE126FF17482EC70C6E45644E04090ABF392E5F135", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "a2ff8120-d06d-49aa-b56c-b4ffdc93cf04", "value": "24576:RH9iKnN1lvn928lSnigsGXLwVOoEP2qMkKDYLUPMzahn:BX5vn9HlSigsGbwVOoAlRaYLUU6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697973, "uuid": "db989ef9-e0d1-4bb1-8711-77fa7db4a9b8", "value": 1206407, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "8d7f792d-4ce0-4d75-96c8-e9e881192300", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a12c61d2-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1718697973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "8085aef2-2c2b-47b9-b88c-45932d6d7259", "comment": "Malware payload (Gh0stRAT)", "value": "c51e84d4d53678605a1cb5feb6436c84", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "0058dc2f-33a2-4cc9-8d29-d68c2a89db3b", "comment": "Malware payload (Gh0stRAT)", "value": "14f381c0d75d7477de4bc89012f6916dcf1d373c4ebb23684baa73ddd3bef054", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "00fe0f06-430f-4952-95f2-b92ea7e1481c", "value": "T18D841210A4FE4C19C2C521700D2DAF8A6CBA50E52EB01C4FBEADFF765DF59D890286", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "92affeec-f907-485e-b1bc-67b180f46365", "value": "92cbf1b7939e726b820cc211fce00750", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "fd8c981f-843a-41d1-a9c6-c281995ce561", "value": "6144:ORjbUHOvGUNIE/FDjBazqjWgR+MSEtvlZTONpRGX5B4PY3mA0O0Gp8NhY5Jod:ejbh9tDjiuT+xEtl0u4w3mAZyxd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718697973, "uuid": "98e88cdd-e741-4c94-a13c-700c58c27820", "value": 384000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697973, "uuid": "cbf8d4fc-5c57-4e8d-b6aa-b589df5874b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5bee5dd-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718698088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698088, "uuid": "51e6aa52-8579-45f0-b454-eaabaff5ee1b", "comment": "Malware payload", "value": "672bc8381740e119beda5e1bc92a12ee", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698088, "uuid": "5a5c4c25-56c7-4ab4-a75d-e1074c6faaa7", "comment": "Malware payload", "value": "5aef93c034103fcbac766f6ad34ed93b1a28ebfa01a4e16db3a6ab719738bb23", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698088, "uuid": "271bfac3-bc6e-428e-ab68-2ed7f8d713be", "value": "T175C7336133F90FD6DFC5E233E94096B061247C2DE8A12EBB7EC67F5276A0AA5144D4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698088, "uuid": "4ea70e6e-464c-4aea-8ed3-487eefc7f7c7", "value": "e5c5ca1b34fbb905db9c1e85dc2f3253", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698088, "uuid": "46a447e3-3fe4-42dc-b703-61ad6c0b60ed", "value": "786432:+5rRv9CpGatpGht73yyBWtOLvu29uLNUMRQhI1dk7hZlRAraptu9r7A0gPuAz:G9v9Cl47Cy3ONJ2hRrAraptuV7N8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698088, "uuid": "13b5834a-57ef-4904-a6da-11659d577d30", "value": 56540327, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698088, "uuid": "7a90af64-875b-4833-955f-dfe82972d186", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0942a97b-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698147, "uuid": "a72ec0a0-57e7-4076-8612-11233af4b07a", "comment": "Malware payload (Gafgyt)", "value": "69fdafb7b5ca6717b95db798492baa9a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698147, "uuid": "8498e3e5-e31b-432e-8ecb-0afe59f0cea1", "comment": "Malware payload (Gafgyt)", "value": "cd73f17d205250230f5ba85e5e428cb4f3d46a1af5e9ec38560a2fd1576b0ead", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698147, "uuid": "14b1cfab-4ebf-4d2c-b816-8b8f5a74f67d", "value": "T152B33A07D560C47AC0C76A712FDF96629673B4F90332720B33947EA52F128DADE997", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698147, "uuid": "2996f558-73f3-4d81-860d-e3b1aa29330b", "value": "3072:3u2lo7tbhFGYvuoIp1/FXwOTLmTT3gxHuW4:JoIfrLmTT3gxuW4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698147, "uuid": "be568a7b-cdab-45a6-b130-4f7c928c5e5c", "value": 110714, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698147, "uuid": "70d59eae-d559-4e62-8907-2e87f10b3823", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698147, "uuid": "60b03a85-8977-4d56-81bd-f90f03ac7779", "value": "t1f4213302a0fac6182bb799209c7c47f10555262372427e717f0ec5c44537003a978d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "095711ed-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698147, "uuid": "9cf69ede-4d4f-4004-890c-48104f7c0eba", "comment": "Malware payload (Gafgyt)", "value": "dff4ab61415a746d3496388d2a56a7a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698147, "uuid": "57bbd692-d635-4f99-8ab5-0830f78d8ac2", "comment": "Malware payload (Gafgyt)", "value": "d8fce1274ae8dcac1c525133b015f486c8895e4a7737d25c1571589e3b2024bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698147, "uuid": "94e76eaa-564c-47d2-a891-ab753620ee05", "value": "T121933B05E362C1B7C4871B76019F9A6B0531F5A70B2AAF06E36D2EF4AF234D53146B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698147, "uuid": "226dd064-bb6a-40c9-8acd-994d526dccc8", "value": "1536:VUL6Ny4BBCyGo0vBm2c+rLxXdkXntTyTHwcCesFswoRmGMEom5PswFFMCYJq9:VI2yhA0vBm2cItG2TQphYUEomJswFyCr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698147, "uuid": "cbb8fef8-ff96-413b-8c93-e79370aeb814", "value": 96374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698147, "uuid": "e44c51ed-d8eb-4419-9a7a-741008954f34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698147, "uuid": "f3cb325b-08ba-4722-b528-6aa88e644bfd", "value": "t150212313a1fac6186bb799209cbc47f11655262372867e716f0ec5c44937003b97dd", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0990672b-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "bd2f387a-7042-4576-b32f-343354efc705", "comment": "Malware payload (Gafgyt)", "value": "430becc9adf3f7d1aa53ce4f695b697f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "d250d5de-2859-495a-be17-5247276a1d24", "comment": "Malware payload (Gafgyt)", "value": "c96477b97351679d3643438e59ef0f5ec26bfa76afefa843e8e1f97cf5488845", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "015f75f0-b47d-4f88-bed5-fd366f42f0d0", "value": "T13BB31A93F411EAB6F44AD73308D78B247670FAE14B53152263173BAAEE361D4385BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "0b6500ef-d2d6-44d9-b6bf-0e0312e9ba32", "value": "3072:I8ZSQeqacWucW0JcWcBQiiv+5DFIQb0Go738YgdAqcxQYmmH/zTLlKHSwn:jSQeqacWucW0JcWcBxieDKQb0G838Y/A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698148, "uuid": "674fab61-9a31-42a2-bee2-48f7f4d683d7", "value": 117964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "7f4a3d85-f516-4569-baa3-2ccf205ef422", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "3fa1c8fc-e366-4cee-ba6c-36bf4fa74163", "value": "t17d213002a0faca282bb79924acbc43f10550262372827f71bf0ec6c44537002aa78d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "099321ed-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "317645b8-a588-434d-97b5-8c46c33695e0", "comment": "Malware payload (Gafgyt)", "value": "615a77c17c9b5fbd737a032585b11fa9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "db485599-254a-4fa5-a990-13076b4373b0", "comment": "Malware payload (Gafgyt)", "value": "7ddf94beeefc29fecb8b3844317e4e9f06a740c32712f27e23acc8c47504e4aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "8518b3ee-98f7-47d3-9026-784f7c23968f", "value": "T1F4B35C17A3290687C98B49F02CEF3BF147A9E9E113E35545960ABFD01773EB41092F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "e5f6f73e-5319-4073-968b-7645b5dd58d2", "value": "1536:SpEr8nURZAEtfpIhlN6AadTqGrgZusjhnLmfmsPsSaF2Run:Sp8ILaIz8eGCLwmqsSacRun", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698148, "uuid": "4cf0edd2-3c07-4db1-94d2-ef354654debc", "value": 113460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "08b31b2f-19f7-495a-bfd9-e10fedd84402", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "68cc16dc-1efb-4aad-bad6-946c92851256", "value": "t1de113003a0eac6282bb699209c7c43f0012027236282be316f0ec5c44537002a978d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "099f0377-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "b9eef65c-4bdc-46ad-8f22-09724ead119f", "comment": "Malware payload (Gafgyt)", "value": "c7840e6116314e0d551b25d8f1bbaaed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "43ec7bbd-00b0-466c-9358-ca1e641ac7ff", "comment": "Malware payload (Gafgyt)", "value": "ebf50d3e178fd78c5501c67270b913b6c376d493b261a9d52724f93d5132e1a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "9af1ef65-28ee-40c7-a561-77985282c228", "value": "T180E3D73E7A12EBBEE169863107F75F7087A522D227919345F26CCB181E7128D1C8FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "412cdfcd-7256-494a-a5ef-fe95b3d61ef5", "value": "3072:0i6s474kHJDcLpIGusJPuV9vihmNBymgYmPQ:NyHVcFvPuV9ahmNBymXmPQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698148, "uuid": "a6e74dab-21c2-4e88-a38f-1ab127900f77", "value": 152375, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "227a7a0d-e27a-4330-b3ef-f186e867c050", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "304501c9-1730-4837-8ff1-e8ae2a36e77e", "value": "t1b4112303a1fac6182bb799209c7c43f11555262372867f717f0ec5c44537002b979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09a4fe26-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "36153d64-e0c4-49e2-be46-6e50f4994f5d", "comment": "Malware payload (Gafgyt)", "value": "3f85b62783d068dc9270c9ee737cb7ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "562777f7-f1ec-40bb-87b2-f02c1fdb3832", "comment": "Malware payload (Gafgyt)", "value": "e530c622f6693fc8358e609b5db51c33e81bb282c8b85403cddb5246f89055c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "73c949a9-2df2-492a-b5c9-41887d3c3d0c", "value": "T1B4A34847D1719EB3C083AA7924EB99300723A9A15B4F1F65212D97F8074F9CEB84EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "5162a7ea-7e64-4c3c-a612-661df31e9cec", "value": "1536:U6JeOoeMIPUTpUD57from58Fuyu29hnfmoaswGt0YNHH:UkCe3PUTpK6Hu291mdswGiYNHH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698148, "uuid": "c2ddfb1c-098b-4f6f-bcd5-68a669987c22", "value": 106858, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "631aaf19-5766-493d-a71e-a7b3949afea5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "f37c90bb-2dc6-41e0-a718-6de8cec2d24b", "value": "t1aa112013a1fac6282bb799209c7c43f1165526237286bf71bf0ec6c48937002b979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09aa7acc-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "c94e1eec-6253-43a8-990a-61e4e45e7f1b", "comment": "Malware payload (Gafgyt)", "value": "acaea3cf5d9d5326ce7c9179437f7054", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "1af39a16-24be-4c3d-ad16-853c2054c030", "comment": "Malware payload (Gafgyt)", "value": "4731844731f3fd317dbc11783a9aa3275f09f93719ae7238013a8786dc2b589c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "4b9f5d5f-4946-44d0-83f3-fcf5f7432f3c", "value": "T10FE3A51BAB615EB7D81ECE33019A8921118ED19613D9BF6BB2B4CA1CF74B94F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "95b87eaf-0d34-4269-92f2-7a72e5cd0aa1", "value": "1536:/vyejez5tMXrpyrTpHToBA9i4PKzSYm/VBymv4YmPQ:/vFrsrTd7kAK3mNBymgYmPQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698148, "uuid": "6a0940de-6440-442e-85d7-cf15ec0418a4", "value": 152375, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "4e1344c0-59b0-4d40-b594-a28f4d09fc15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "4ac8fb6c-2e04-40bd-8e03-423654280989", "value": "t1b4112303a1fac6182bb799209c7c43f11555262372867f717f0ec5c44537002b979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09b20f30-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "af8a9c7f-dee5-4789-8618-fc9dbb38af8a", "comment": "Malware payload (Gafgyt)", "value": "2164f66894b67a35677d97d723151b61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "65968aff-cfb1-4f08-91b4-f41a24418e39", "comment": "Malware payload (Gafgyt)", "value": "d2af4b739bbaf35b7673c3798b3e2d337c19937fcaf32f428abe0032df2e342f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "b2c3ebe5-c673-45e4-96af-53a7d319e0ea", "value": "T1F3C30704F650862BC2D32B7AA79E438D37365B98A7D733155938AFF43BC27982D365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "c033a46f-0226-4f70-9499-b4bf1c206803", "value": "3072:7IMDsyuaQw1i6FkOG6GoaFbvF/3bKaJG02KK0zeFcm2QnN5KXKJn:7duaTVnGokv5rKaJGQ5Ecm2QnN58KJn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698148, "uuid": "c8df0694-65d2-4403-aa7f-aeb059e1f3a0", "value": 120585, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "0d7b2922-e0af-443c-aaa8-58b7d2128fd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "9ee67801-e817-4c9a-9d59-3a1a0be41959", "value": "t19f210012a1faca282bb79920acbc43f11555662372867e717f0ec6c45537002a979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09c8954c-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "3c7a8a21-a258-491c-9b6f-dff38098571c", "comment": "Malware payload (Gafgyt)", "value": "b7837566ec9d4db845a6b970efff3073", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "41f4a30f-ac69-40ec-bb30-c72d2dd1b2f2", "comment": "Malware payload (Gafgyt)", "value": "4a0acb3bd41ef4f01037a578c4a963a6825bf3d15b9d62b364d521ca1bc9ac43", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "ffcfc953-0b02-4929-a208-d3b95aea63bc", "value": "T148F33905E6408B57C1E2277AE6CF824D33338B94A3DB33159938ABF43FC27995E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "fa1aeec6-e369-4398-b2c0-4ec3909aa192", "value": "3072:41g2L2INNlzkCYYICUqaQcvBugn1wpV7tuAomFwfBxKQodn:ug2LBNNlzDYYXUqa/Ign1wpV7jomFwfg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698148, "uuid": "0501de8e-893a-4cf8-8ddc-9b4c96f48af1", "value": 159881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "41979670-35be-416e-9a44-c1fff87f9d74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "097290ef-6800-483e-9fa4-c3777fbfb0a8", "value": "t104210012a1fac6182bf799209c7c43f11655662362867f717f0ec5c44537042a979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09d9b671-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1718698148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "d77503c0-1947-4ffd-a46f-545ddac6c70d", "comment": "Malware payload (Gafgyt)", "value": "42d426b4a348a903c55c730d76618dd0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "e746fa0e-eabe-403e-8099-1e4c3ffba29e", "comment": "Malware payload (Gafgyt)", "value": "5dbaeaca0ef761fb1dd231fa9dd10bf8d8aa6b82e668d161f0b74b55e0abaa67", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "3e85455e-afb5-42ff-a1a3-b315ad735faf", "value": "T168F33A05E6408757C1E2277AE6CF824D33338B94A3EB33159938ABF43FC27995E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "23660c29-0064-4506-8261-6608ca244812", "value": "3072:41g2L2INNlzkCYYICUqaQcvBugnYQTxVtuAomFwfBxKQodn:ug2LBNNlzDYYXUqa/IgnYQTxVjomFwfg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718698148, "uuid": "7a0b2962-45c1-4ba5-a5c4-f5b0b7f38a9f", "value": 159881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "aaed5223-7820-45aa-9a70-1c79bdeb628b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698148, "uuid": "23a86f9f-bbc0-4a71-a729-59b773c0c5ae", "value": "t104210012a1fac6182bf799209c7c43f11655662362867f717f0ec5c44537042a979d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c539c8ab-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718700610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700610, "uuid": "337e1c7f-024d-4b9b-a097-e12d6d068aa7", "comment": "Malware payload", "value": "6752e27dd6106b86c4bf30d9a0bac63a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700610, "uuid": "29253ee4-396b-409c-bd1f-2a99bb387f28", "comment": "Malware payload", "value": "79de548f0443755f2d22be90d81f9dc1f2ab21efe4980e420f5e01d195330044", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700610, "uuid": "e82dc670-f27f-482b-8b65-4f44ed90c449", "value": "T1B5A4E0CDA69617726BD70FEC481E66A63691DEB9C370E3864FCE789FA46447870C0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700610, "uuid": "a59dee7f-c9be-4ae3-889a-1ce087bde4eb", "value": "6144:98svkQW1jzs8lwU/oIyEBvxQkQM6KlgBqwcSxtzQfI4IISZXFrbM10f2lu2UshDH:98smH3KU/9vKkQM6zLSI4IIqFrb00+HH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718700610, "uuid": "54a6ab30-f862-4680-a7ec-6db2f5fedd95", "value": 452652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700610, "uuid": "22be9bc3-a9bc-4120-b3c3-7706660aac8a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c341d1c-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718701129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701129, "uuid": "03d2ce9c-d647-4da8-b4de-a4e06fc647b4", "comment": "Malware payload", "value": "118c05280dcd14b661e26e548da209cf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701129, "uuid": "d4bbc7ea-433d-474c-a839-0c456680d1bd", "comment": "Malware payload", "value": "5a969a43307eb00fbe5f7166d1de10762050d9709700c68fdc2ec9ff61284e47", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701129, "uuid": "9b356e70-fea8-4b07-8ab0-00341f62af3f", "value": "T13545BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701129, "uuid": "4875fa2b-2f4d-4d03-8548-9cb06c1c5028", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701129, "uuid": "a2ff0e9c-084a-4716-bebc-63df8c2c2c34", "value": "24576:fqDEvCTbMWu7rQYlBQcBiT6rprG8au/2+b+HdiJUX:fTvC/MTQYxsWR7au/2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718701129, "uuid": "62160884-0f68-48a3-83c4-f03186a654fc", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701129, "uuid": "8b2fe932-af76-4bda-bd8b-6e271d32e332", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "822b1490-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718700927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700927, "uuid": "cb8bbcbf-4150-433c-9fab-dc0f2b5b44b5", "comment": "Malware payload (Amadey)", "value": "44b7981e2942e199e3d0645357fe48ee", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700927, "uuid": "b1772837-771c-495c-b0c9-fdf0e7c31824", "comment": "Malware payload (Amadey)", "value": "3938991e87587e220f62d938222c637e5363d9f194cabd431404c064eeadb1ea", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700927, "uuid": "e3b76610-46fd-4941-baf1-db1a134b4f29", "value": "T149953377B63014C7E29CD731B96B499BBF392F96E0BE85BBAB15082564071C1EE234", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700927, "uuid": "64f44012-017e-4aa4-96f2-fd81f519950b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700927, "uuid": "26413cb7-369c-4d50-9138-4f79cfbfb1d8", "value": "24576:0NGcihJ7p7vdRvNyJvCJSezTt7ZcrtFP4CZTDZr+eo+pb1+LJjBM2iIcRcSqU1SJ:0FeJ75dJNyhCpZertFbJly+teldU1I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718700927, "uuid": "3f391099-196c-4e94-97c6-89d1d3919bc0", "value": 1885696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700927, "uuid": "0e19bd5e-ceea-4b19-bdd4-6f243fc6df9c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b7c2fd-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718702380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702380, "uuid": "c797ba0c-3141-498b-a1c6-1eec90a3dec2", "comment": "Malware payload (Amadey)", "value": "dc055f00148e6bdf3dfb821a495e7456", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702380, "uuid": "7d20ad73-2770-4d06-8837-89f2065ac019", "comment": "Malware payload (Amadey)", "value": "c24f9d80e670d4169c613e292077e9c00ec2eecb21dac08f4fc60be23883b16d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702380, "uuid": "9ff0c3ac-eee4-4f74-abc8-e9ad1db3544d", "value": "T1419533270FCE546BF4CC27729828B502AC6F91E1515AFD0BE829C0F2C75776968F98", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702380, "uuid": "3c21ed48-7509-472e-86b3-6182419c1230", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702380, "uuid": "18e0e341-a697-470b-a2ec-078ebd1f51c5", "value": "49152:C+zTSO4GCP0vi3D/gPfpR/Q0SrWzugQi2U4lkVVrb:C+zOPsvh5BSgu/in4lSx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718702380, "uuid": "8afbff5b-3b3c-45a5-829c-2502167c309d", "value": 1912320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702380, "uuid": "2fed90da-1cc5-4ce3-9504-118eef672a1a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edc94e33-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718701365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701365, "uuid": "70da84da-671d-4af0-8bfc-87bc56195120", "comment": "Malware payload (RiseProStealer)", "value": "5dad96e324086d28b5d49e38bca6a6ea", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701365, "uuid": "e3d85daa-c77e-4127-a9c8-69594527a5ac", "comment": "Malware payload (RiseProStealer)", "value": "c9c6e4e66bb7618354883874097271af9e42352a057d8577a9a702807c478150", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701365, "uuid": "3d3d1162-23e8-4671-8c2c-bb5761c03042", "value": "T16D5533A9626FE760CA1893B9C2CB07746F1CF38D32954B12164B9D814D7078FA26BC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701365, "uuid": "d90eb9d9-d314-45a4-9ca5-326948d5f151", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701365, "uuid": "fb36060b-dba2-48a1-b4bd-71bccb2969b0", "value": "24576:nZJkmh94bNXec/yrhXhXj8qnwESDF4jdwQuRHW/nS/D5nfTS96Te46:ZJBcbNId1jNwXDYdluR2/S/Fnfk8D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718701365, "uuid": "eaf40c8d-a0f6-4d36-9f8f-ec91a5533ba1", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701365, "uuid": "80ee38ae-6788-481f-8d3f-982c5b84d870", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8eb91f3-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718701126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701126, "uuid": "5b64218e-3931-4471-bc6c-27f2db8aef47", "comment": "Malware payload", "value": "69839668341b314b868662364b2c1e19", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701126, "uuid": "9ade1bb8-087c-44d8-874c-d6c55504eb96", "comment": "Malware payload", "value": "22a547faa28194e278538e1cb4b42491bee3ab1e19abb7d35cbdc3d6484c0705", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701126, "uuid": "f629bb88-14e5-4ad6-91e3-3a4577f45206", "value": "T1DC159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701126, "uuid": "b73c03e3-06ba-499e-92c8-30e1de6a8e74", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701126, "uuid": "e36a46b9-eb45-4749-a836-992f86a62461", "value": "12288:GqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TH:GqDEvCTbMWu7rQYlBQcBiT6rprG8aAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718701126, "uuid": "f75a0977-3261-4866-9249-f2bcfe15c85c", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701126, "uuid": "ce3a79e9-f571-4f63-8396-3f1769b21152", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed948392-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718702825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702825, "uuid": "8b7c8853-5ae6-4b86-8f4e-1b79b36fd45a", "comment": "Malware payload", "value": "6bad0d8bd96dc7fa04cbd36fb7cd3cd3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702825, "uuid": "3b19cf08-76fe-4eaf-9e36-5ee0f5a69209", "comment": "Malware payload", "value": "304344761eb9b34d8d3bb22fe8272f68db5f9f9ba6fdcd3619906c13d8a315ee", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702825, "uuid": "ed1b71f7-8e2c-4a9f-aff4-8161742e8e36", "value": "T160C1C75B3C504A33C81151B4078B4E0DE7B798A86FA5ED468D1B6EA92D31E834EF46", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702825, "uuid": "ecc8e262-d987-446e-97f5-0c1a350a67c1", "value": "9f0f5afcd551424789f227c045328a54", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702825, "uuid": "75721747-c2bc-4c0f-8273-1be90413e8d8", "value": "96:S0Y89xtofS4oguQ7tGPeb4zrYF3XgsttFStNoyn:l2l0+9kYnjtStNoyn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718702825, "uuid": "fa24dfe3-52c9-4816-9b83-b4ea3f7af74c", "value": 5632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702825, "uuid": "77ae4c4d-bf84-4f11-9d9a-876dd710e0ac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee7fbfab-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1718702827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702827, "uuid": "11dcb6e8-c851-4600-9ebf-411eefa5cf19", "comment": "Malware payload (Gh0stRAT)", "value": "019f79bad911018716678def3bc289b1", "object_relation": "md5", "Tag": [ { "name": "7zip", "colour": "#0b8d16", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702827, "uuid": "72e814e2-6b73-4259-a2fb-884144a4edfd", "comment": "Malware payload (Gh0stRAT)", "value": "24f5ebdad00d567029760a3e364b2702d1402fe4dc6c7e0801824b02bd239c22", "object_relation": "sha256", "Tag": [ { "name": "7zip", "colour": "#0b8d16", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702827, "uuid": "47220505-0521-43b1-8afa-78d0955f040f", "value": "T16CB4239A3C7DBC34750945FEB70C4A0B8A4783BCFC365B4085227D31EDBA28E15A69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702827, "uuid": "39a3fd3d-89cf-4229-aefd-7321891e15bf", "value": "6144:k4GBTCX0LSFaEPsBjvraT/o/8qF3HfYakJNJC3EPDkv0niR6KeLsn/Rt3OLnIfS/:xdFBuEg0y3HApQ3EbkE/bwGzWzUlq7w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718702827, "uuid": "ce91c591-5314-4433-ba45-c3dfae8008a7", "value": 542042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702827, "uuid": "068243da-639d-4f84-9702-7929276989a3", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eed83d1f-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718702827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702827, "uuid": "1306276b-8a13-4abe-b8ad-2a4828bc5739", "comment": "Malware payload", "value": "dd6599e3d8f06d7f78c4cb4e5a73e41f", "object_relation": "md5", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702827, "uuid": "db6a2cb7-e085-489c-811b-a0b51d425a7c", "comment": "Malware payload", "value": "9e1f53a3f6efadb7207c6f256a0b6e1707d293ce2c9c0566d7048387df6b6425", "object_relation": "sha256", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702827, "uuid": "4d439297-30d3-4a47-9619-b215d472beb8", "value": "T1E824235602B5AB80F7B503FE2E81B3297A520B5B09A57203E5074FDB3887725E50E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702827, "uuid": "d6988f98-818e-49fe-878b-5a339a797606", "value": "3072:jajSaQcK2TTuBrnhh2jEoCKgim4dQFPUHQ0Mc1y7jLsUTGgebnww8:jaPQcFHirraEh02FsQ/c1yzpS9DH8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718702827, "uuid": "ca716a67-8d34-488f-8741-f95de72048b8", "value": 209885, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702827, "uuid": "cbc28ccd-f585-4ffd-8d01-e393e3dfeb56", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4d1553f-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1718702837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702837, "uuid": "e576d3dc-0139-4734-b767-3de51feb2d87", "comment": "Malware payload (Gh0stRAT)", "value": "0b1baeeffc82ea824168e57105dffb7a", "object_relation": "md5", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702837, "uuid": "03248f7b-da0e-43ea-b388-63e9408bbcea", "comment": "Malware payload (Gh0stRAT)", "value": "401790095e2544ea86840db790d63ae541bce50f0bc8baa7822e31ecbbb5a3b7", "object_relation": "sha256", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702837, "uuid": "0c98b0d9-2936-4f92-89b4-33974dc36c7c", "value": "T11736330E093F3E5CAB455A34E241DC2276EA7FD867AB9705EB06BECC3140806D8D56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702837, "uuid": "340bd72c-2c57-473a-a310-f31cfaaa452b", "value": "98304:svePsc0BMb6yK2ZuVKxcOokyil8R80cJ7hvJI7nyKiu0sIpsVzcTBurpJ:lsc1a2ZRokyiI80QJqiu0sIzFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718702837, "uuid": "76ac1200-7a7a-42c6-8174-f856a5f38345", "value": 5091156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702837, "uuid": "085ad71e-8e97-4fcc-bb6c-4aac5875c5d1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19791447-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1718702899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702899, "uuid": "e512d18f-d97c-4a4c-8ba5-dc25bcc04d63", "comment": "Malware payload (CoinMiner)", "value": "02aa02aee2a6bd93a4a8f4941a0e6310", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702899, "uuid": "d6f7dd3a-c84c-4961-bdcf-1d71566dad0c", "comment": "Malware payload (CoinMiner)", "value": "01a976b80253450a09d0b89075f5fa923a3411265f7bc8f3413d059fd662aa83", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702899, "uuid": "e0394138-e249-4996-ab3a-fc550027f7e5", "value": "T177E5333174A08033E113443587D4D7366879B9749A322A9EFF548A7D7F21EA2C267B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702899, "uuid": "aaaf9fee-6b82-4d4d-a54d-f3762bcf7ee8", "value": "4cfda23baf1e2e983ddfeca47a5c755a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702899, "uuid": "3a4304ca-41bc-4323-b0d8-37ab6b23d504", "value": "49152:YKbiWztohDIZZYiOG2qPX4xRgPZcUAtijL+kOqxvDUuPBBVFJt6NGGTDVOXLyago:YKGWJ6sDYI2qPX4fgPZcUAUjSkXvDUin", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718702899, "uuid": "e4f6a32f-d106-42dc-bb04-3628775e19a2", "value": 3127301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702899, "uuid": "fb9a82f0-1138-4278-97cb-f261121aae7f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ff0daff-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Redosdru)", "timestamp": 1718703071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703071, "uuid": "e8a0d769-7ea0-4af8-94ca-da946ac7cffe", "comment": "Malware payload (Redosdru)", "value": "1adcf48a05e66c1102e4fb1974e9bbe4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Redosdru", "colour": "#971e8d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703071, "uuid": "f2cfafcd-4842-4e62-a9d1-88c2a336dd69", "comment": "Malware payload (Redosdru)", "value": "04e5c9467245df7b1beb4a2646d038e2320147f035fc18629adfb32b4da76ef1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Redosdru", "colour": "#971e8d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703071, "uuid": "5d16fef0-a4e7-49e4-a9fd-e357d6f6547e", "value": "T110538E137892C077C4C381B258725F5B2FFF3A3005601993A7941F6A6E31695AF3BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703071, "uuid": "da84891a-f014-48dd-86d4-18f92efaa229", "value": "45faf44fe201670daca333d176faea38", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703071, "uuid": "9c52c9c9-67ec-4a8e-a779-4f894b7aa38f", "value": "768:3e1iZNbQAKrWGOkGQeN70ZqL37JMKBBmbUt4i:36iZNer5GQvk+ath", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703071, "uuid": "2d9b4297-631d-4acb-8ded-39e4ce247b7f", "value": 61506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703071, "uuid": "a39e4193-b89f-427d-bdf4-a5c5a131d0f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8004103e-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1718703071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703071, "uuid": "d454e269-f858-48dd-b3fd-7226835faf36", "comment": "Malware payload (Gh0stRAT)", "value": "90d83bbad8110780e90b8f0beab172f9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "Redosdru", "colour": "#971e8d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703071, "uuid": "4d29bdf9-904e-4472-b9ce-529c3a63db9e", "comment": "Malware payload (Gh0stRAT)", "value": "c28770a88ad997d80ca6f461893cd6f032f614a43c449f21e73df15e8a843105", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "Redosdru", "colour": "#971e8d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703071, "uuid": "e1d12414-d6a6-4dcf-8646-17df336cca4e", "value": "T18A539E13B8C2C077C4C381B258725F1B2BFF3A71056029A397941F6A6E31695AF37A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703071, "uuid": "5e8fac58-d3f7-4868-867d-b55bcb8f94bc", "value": "45faf44fe201670daca333d176faea38", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703071, "uuid": "40a94be4-d7d3-489b-9047-c1418540fa23", "value": "768:3e1iZNbQAKrWGOkGQeN70ZqL378KBBmbUt4i:36iZNer5GQvkUath", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703071, "uuid": "fea70fac-550d-448c-a9d7-a0c9f709dcb2", "value": 61506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703071, "uuid": "83024e82-d0b2-4fa8-8c11-45ecd02abb19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f542a1a-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718703097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703097, "uuid": "3f9ebb6c-616d-4bf9-bf05-835f3eae59ba", "comment": "Malware payload", "value": "d27a00984e82dbfc554df8a53e03cbcc", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703097, "uuid": "c9e1b36e-bc9a-4af9-88f9-d227a504fe44", "comment": "Malware payload", "value": "b8d92a1b30253b1525bbf7e1e38429291cb68085f0886c35cbee22baa66d024b", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703097, "uuid": "65535611-a504-4d01-9567-2b28adfe6084", "value": "T138E5333174A08033E113443587D4D7366879B9349A322A9EFB548B7D7F21EA2C267B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703097, "uuid": "7d666cc1-0677-4e4b-8e52-204d9ac5ad73", "value": "4cfda23baf1e2e983ddfeca47a5c755a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703097, "uuid": "d495f707-f3e2-4a6b-8ab3-5b8333766713", "value": "49152:YKoiWztohDIZZYiOG2qPX4xRgPZcUAtijL+kOqxvDUuPBBVFJt6NGGTDVOXLyagR:YKRWJ6sDYI2qPX4fgPZcUAUjSkXvDUiG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703097, "uuid": "a114148a-ca51-406b-ad46-a17928a0b577", "value": 3127301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703097, "uuid": "7d2521f7-e898-43ea-ae4f-f5ff07897609", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a2ec3b0-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718703518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703518, "uuid": "7a556877-9e2e-4a22-879f-7cbfbc9eade9", "comment": "Malware payload (RiseProStealer)", "value": "63a92e8958c737b6d8ea478d1dd8aa51", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703518, "uuid": "7be30924-0d58-4fe3-9df5-480ec7c05155", "comment": "Malware payload (RiseProStealer)", "value": "ef186064aabc1c42876168f653b4f82fee086fa9992ce4169666ce1ff9e0fcd3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703518, "uuid": "aeff51e8-855d-48c0-9ebd-19cd7dde7b54", "value": "T1B85533F9F221A820D029A275943F7A1D4781FC78A6442BF2D5EF16113D720FE1FA99", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703518, "uuid": "6dedd344-09e1-4ea8-86c7-7bb43cc804fa", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703518, "uuid": "fc237ff0-9ae7-4086-9c7a-20cc24ccb91b", "value": "24576:HfK/3tKi9I5RvJOxKxQZhhmkpAtem7iewQRvyEvOsZ/dtibnQ3v0lD6Tz:/K/3tRckoE/mqkeAielRY2dtibQcOT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703518, "uuid": "1f9ec3e0-3a01-462d-934f-6d1e17f09961", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703518, "uuid": "d3e51231-b7c3-4a8d-92fc-a2c308ee7d7f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05f5e36c-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718703725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703725, "uuid": "2a8e7f14-b29d-44d5-9bf8-14c66c26f402", "comment": "Malware payload", "value": "ad8c6b8226b1656a21899499d93ff1fc", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703725, "uuid": "d90fdbd9-5264-4795-8656-04de005bb6e7", "comment": "Malware payload", "value": "b891dd9becedd97899fa80f1981459b287074b45b7f1aa1847ad350aaba45967", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703725, "uuid": "15161f62-428e-44fb-b27d-2e7b42fcd680", "value": "T1FA442349CD6EA57067C96253704010172EBBF243BADE1AE0CACAD3B95918FE57E303", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703725, "uuid": "69865e45-ad10-4df3-9636-75010d263513", "value": "6144:NjNsVaIsSlaAGeYWaWC8ZTEELZWFTfIgTtNGEzduS/fpP0K:DIlafFWC8P6jIQ9RnpP0K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703725, "uuid": "9189becf-97a5-4845-a2d6-3507f7b37814", "value": 271424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703725, "uuid": "77f6bf3e-0d87-4479-805c-4b29c56a728d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06accea3-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718703726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703726, "uuid": "3b7c5b94-a0ea-48de-b82b-51db67de1d0a", "comment": "Malware payload", "value": "c11f44a0686e5730b87c39b6af003824", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703726, "uuid": "04521a7b-c6de-4517-a051-2f3825f519fa", "comment": "Malware payload", "value": "2f1c2ee6ef080d50517aa721ecc829cde2d8c47cf1f1a07304e0797468d95379", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703726, "uuid": "d70e29ac-4a96-4180-9c44-b66e14ea52e9", "value": "T1E3A44534C38A2E38BA6E853027FB578B9C0062BF57D18DC5FC575A5E709669A91CF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703726, "uuid": "33c20a50-a92c-4615-95ca-fc0863c0a9cb", "value": "12288:JCnAMObDYDTK6StBtIF4IwrdXavOpC6865:JCnAMObEDTKtqodXaGJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703726, "uuid": "e5745a8c-b9e3-4333-9583-57885133d693", "value": 474924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703726, "uuid": "ccb50296-16fa-4186-a107-96b57c4abc5d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c92c3e9-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1718703736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703736, "uuid": "e9852470-563c-47bd-b785-dc33891bbe07", "comment": "Malware payload (Gh0stRAT)", "value": "d3a3b4c7f2f0edfaf56cefc8c05f73fb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703736, "uuid": "8c22649b-0f26-48ba-be0e-46655b8d81d8", "comment": "Malware payload (Gh0stRAT)", "value": "c2908fecd46ed515e5be300a9aa45272c390d8d0c2975ce563d6327ec1cbf613", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703736, "uuid": "17b205b3-3c8a-45d6-9212-3be69d47c8c5", "value": "T103251901A7A25034F8F725F959BE21BC993DBAD01B1490CF93C46BED9729AE17C306", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703736, "uuid": "e4805f5b-02e8-4b2e-819d-254191a385c5", "value": "06120a8dd16bbb5ed838070a082fe9ff", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703736, "uuid": "f8ef7123-87b4-4b42-a16a-93e04fd6802a", "value": "12288:Z/xRnsHqxK3viiKuuTClI8cCJd5BskCuzkA92T31jnBOz86F:ZpZsHq030T8cU5BHiFz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703736, "uuid": "e32b0d7e-2448-48ad-a1a4-3fbfea7ce2de", "value": 994304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703736, "uuid": "6b4d223f-9b1a-4757-b2a6-a9104ce2e8e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cb3a734-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload (MimiKatz)", "timestamp": 1718703737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "9362a8be-6ea9-4862-b106-c1658dc18e88", "comment": "Malware payload (MimiKatz)", "value": "e20d23481a114d78d961f2e37dc5fd6e", "object_relation": "md5", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "aa234b76-0b2a-479a-a81a-197b20fa17fc", "comment": "Malware payload (MimiKatz)", "value": "1bae55baa2dfe26ecc9b148bc2c9820ce05e0fbbfe907a3a116aa08546fabe6d", "object_relation": "sha256", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "8ac61cc6-1955-4106-b9fe-1e30179a018b", "value": "T1038533F31D50F28DCDB77FB14916AE2A2A63434EDD9D84449CC817CA0A3429947CBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "b6c494ab-5c20-4f0d-8225-2b9be8e24122", "value": "49152:WGtfe+6is1Ns569cMtz5FBdfUCjiIleg0xC:LMFI54t9tVCC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703737, "uuid": "41407a38-ac03-4e6b-b89b-d0f803575cbd", "value": 1728200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "ccc41baa-203b-41bf-87ca-01d794ff2f1c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cb9da37-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1718703737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "e91ca0c5-cf4b-49db-9b36-83b9f817f2f5", "comment": "Malware payload (CoinMiner)", "value": "f0834f7f2daa415fb992d93f549bbfd0", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "5c53d5f7-f0c8-4879-a9a8-0a3f59d71ebf", "comment": "Malware payload (CoinMiner)", "value": "e14d20d5a80507197245fc2b53eefc6c5b9de9a422857b376434f7dd03533bc0", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "f8b3aa42-2260-4ee4-8d36-0e0ca46a3712", "value": "T162E5333174A08033E113443587D4D7366879B9349A362A9EFF548A7D7F21EA2C267B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "21b41d6e-f1bb-4ecb-85b6-4fa0d2fe2743", "value": "4cfda23baf1e2e983ddfeca47a5c755a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "61bb0025-60b9-4ced-ba0e-78d76bac65c1", "value": "49152:YKTiWztohDIZZYiOG2qPX4xRgPZcUAtijL+kOqxvDUuPBBVFJt6NGGTDVOXLyagx:YK+WJ6sDYI2qPX4fgPZcUAUjSkXvDUiC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703737, "uuid": "42e25a28-6d75-46ab-8252-db5495ef9f4c", "value": 3127305, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "3882f4f9-9245-4ccb-bc45-93499569835d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cde4103-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1718703737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "5723cd32-8b59-46f1-9788-89970c21355f", "comment": "Malware payload (Gh0stRAT)", "value": "cc58647d7c7350b22545296ead2f7f18", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "8a6ae972-5d41-4ba0-a015-db3e1068f257", "comment": "Malware payload (Gh0stRAT)", "value": "77886cc8a951bb0bb843e54324012ec508f0ba79b5ad7512d0b34e3076c2cd10", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "b127ffbe-a782-4a95-b0ca-1bd7925aec1b", "value": "T14B26330A39ABA839D9034530D191DA32BBF8B9742797A707FF061E4D3620A56D6C47", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "5cbc6f6e-bd6c-477e-bd03-5cc1210daccf", "value": "4cfda23baf1e2e983ddfeca47a5c755a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "50e41c4d-80d4-46ba-9634-80fa781ae36d", "value": "98304:YKTt04clJg+Kmd4kgEDm8m4xoKmet04clrJxBgRDm8m4xoKmoEunKY:Yk04lmdDdm4xpmY04qBGm4xpmEKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703737, "uuid": "11961772-93e2-4e5b-a3ab-7adb95ec91ee", "value": 4658185, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703737, "uuid": "2157f57b-f28c-4c48-977b-bd0399938ca7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26db8dd5-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1718703780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703780, "uuid": "d715bd4f-0a7f-42e8-82a8-2629a081ed5e", "comment": "Malware payload (CoinMiner)", "value": "b3c4004238ef139fe90b5f8041ada1cd", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703780, "uuid": "98abeb26-c0d9-4f7b-865c-f497d0a3301a", "comment": "Malware payload (CoinMiner)", "value": "e6da05c053763230ec6ba48cb976d43f184604d9262799eadb0c27ef2e839ec6", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703780, "uuid": "5ac8f759-e174-4644-aa63-32b927947bb7", "value": "T1FDE5333174A08037E113443587D4D7366879B9349A322A9EFB548B7D7F21EA2C267B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703780, "uuid": "f14509ed-5af3-4784-a3ca-13d1b0a94e8a", "value": "4cfda23baf1e2e983ddfeca47a5c755a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703780, "uuid": "495f26c9-4ef0-49e5-ac0e-88b6206f1eaf", "value": "49152:YKFiWztohDIZZYiOG2qPX4xRgPZcUAtijL+kOqxvDUuPBBVFJt6NGGTDVOXLyago:YKYWJ6sDYI2qPX4fgPZcUAUjSkXvDUin", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703780, "uuid": "14361312-0077-4e23-bdd1-bbb26d6ff885", "value": 3127302, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703780, "uuid": "24f2fde8-31a3-43f3-97e4-7d1040c0c935", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29897bd2-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718703785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703785, "uuid": "72fb4e5e-0a03-4b73-b651-ea1aebc27cf2", "comment": "Malware payload", "value": "f76ec8106bec202535c6b50279413ef2", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703785, "uuid": "c7575eaa-ef1d-4fdf-b735-3d62806a6f69", "comment": "Malware payload", "value": "82744eb53c8774c4fa053406eaf827f0ef3680c9b7a86fb059ea9f609e9ab6e8", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703785, "uuid": "28a07825-8857-4727-b37d-90876943ef2b", "value": "T11894AC7C81138F3D6A5B2675B4FE1958EFA1393F8EB38682B41A1726C45A9DF0077C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703785, "uuid": "5aaed0c6-0bdf-41df-a3e7-2456c327cdfa", "value": "12288:jWpDdtA1wHykEd3I2FAZBencQlqmNYBXn0F:jkDo6E1I2FlXCBX0F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718703785, "uuid": "bce0fc5c-b387-48c9-b082-ccafc1e380dd", "value": 439992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703785, "uuid": "c2a89d00-ad76-4975-8503-b2c3320ba33c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b90430df-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718704885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704885, "uuid": "06a64033-762f-4f58-82c6-63dbfe5b5c24", "comment": "Malware payload", "value": "b66daf637fe516dfc494087f694e0edb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704885, "uuid": "7101dc10-bafd-4769-81b1-855790167387", "comment": "Malware payload", "value": "04f9d194a08af75f562ed82e5e32864f517fd0d5c7ed18f09bfb01197946376f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704885, "uuid": "b91667fe-0f48-491f-870e-1026b210039b", "value": "T16A45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704885, "uuid": "701c1be2-138b-4eb8-820d-a1bb6a3ddd3c", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704885, "uuid": "e73a7f10-1aa5-43e2-b3b6-a8e7f74e2946", "value": "24576:oqDEvCTbMWu7rQYlBQcBiT6rprG8aui2+b+HdiJUX:oTvC/MTQYxsWR7aui2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718704885, "uuid": "ea8bb999-4eb9-448d-962b-36076c002dab", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704885, "uuid": "f477c19f-2ce3-4f92-be5d-aec48d23d0cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cccb8aac-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718704918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704918, "uuid": "245f9963-b617-4624-8720-0d8e3756ba00", "comment": "Malware payload (Amadey)", "value": "51f47917bef7d86ec643b9c7de7926ee", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704918, "uuid": "56fad60c-8a57-48bd-a129-4b05deadd358", "comment": "Malware payload (Amadey)", "value": "5467d6221aff7ca954960fb5407b326465cbd8196fbfd3bfab19708f9985e802", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704918, "uuid": "d2d442d9-1bc9-4ee1-8162-85bce26df87b", "value": "T16395339386FA9327E16609F2DD3DDBD434845A63E21A929E0B23C41E7E067172F54C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704918, "uuid": "7af46b8c-55c4-4eb2-882d-9d0533076508", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704918, "uuid": "8b76e993-ddae-49aa-8c6a-281587f896af", "value": "49152:AgLLy0YhW9wtktZC0lOmcLqwsBDvAVrTY:AgKFhW9woC0lt1biI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718704918, "uuid": "1cb388d8-5fb4-42ec-83ee-c33c069c4a74", "value": 1935872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704918, "uuid": "66bafe99-3689-482c-a44e-0820a2ac9667", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0cce15f-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718704925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704925, "uuid": "04bde134-351d-4a19-934b-8f641a5b36c0", "comment": "Malware payload (Amadey)", "value": "c6dedca6a7d0a8c31bdb00a70992be59", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704925, "uuid": "cf6d5440-95ac-4f79-8452-067a0c1a3ac2", "comment": "Malware payload (Amadey)", "value": "faf7323b3e0275e19260fce083b648e316640d2ea8b64f1937ca4988cd264fbd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704925, "uuid": "9df65749-10a1-4b83-8473-45070fa53a35", "value": "T1949533A448568678D24C9BF42B57C2ACFF3277FAC81BC1645A6C9CE0A066754BF5FC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704925, "uuid": "73d3c9ad-812c-44af-a8e8-a6ee62037eca", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704925, "uuid": "f7c3b3e6-066c-4bbd-a7b1-a0c54776e477", "value": "49152:3N4mVnggLQWHcjbbmtH0ncO1v/l8Nlrq6BbuDm5c3RPC:3PNLCfiUcuvt8NlLBbA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718704925, "uuid": "fdc47ea5-b972-4643-b095-00824ccfb01a", "value": 1884160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704925, "uuid": "4c502dc9-98e9-4b41-887b-bbc8a07c1af7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d7451fa-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718705160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705160, "uuid": "a52d0d13-4dca-45e8-a7b7-adac3f9412de", "comment": "Malware payload (RiseProStealer)", "value": "1b99d6ddb5efa172f810462cb3ca0e2d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705160, "uuid": "f4db0a0c-dfbc-4f6f-9e2d-4ffacbcd836f", "comment": "Malware payload (RiseProStealer)", "value": "35c7a52dfdc7aca16cd27ffd61e2506874ad223147994a7690d11ec697f524eb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705160, "uuid": "a4cb027b-59da-4820-8fbd-10c2ab83be7c", "value": "T1195533BC507A9A28C726703C11DB06B12F3C7A696346696B864F70A31C749FD83A7D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705160, "uuid": "09829874-8ec9-458c-bbfa-03f0a94bf017", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705160, "uuid": "3be53d11-397a-4a99-bf1c-03e167dc77f4", "value": "24576:UFLGG1rVXKuPu9gnLzjwQLRHW/nSby8DymLFJWw:wyarVKukgn/jlLR2/SGrmLD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718705160, "uuid": "9852d7f8-e599-41ca-99e2-d3dcbe00bc77", "value": 1324544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705160, "uuid": "7ec3b258-8cc1-4f6c-b485-d9acb35c0898", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bcd8a7e-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718705185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705185, "uuid": "f2e716bf-e98a-40fe-b6c0-3bb6aead19ca", "comment": "Malware payload (RiseProStealer)", "value": "cee50d1313972e71e99aa08ec07031ae", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705185, "uuid": "45cc95eb-4faf-40b8-b8ac-8ebab9072dad", "comment": "Malware payload (RiseProStealer)", "value": "19a38fb0ae80e6087243d17969ebdd64993df535d60719e8f8ae4d7b5af92018", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705185, "uuid": "41fe2d70-27c0-463f-9305-9a7e02cc848a", "value": "T1395523A60E3E0C01D5B9E4B386575B915E297EB15B08F63892AF79444D388CFAF673", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705185, "uuid": "a20ebfe7-a820-4fd1-86b7-afc9010fe1e8", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705185, "uuid": "c8440720-6954-4734-a5ab-9b0c1aca7343", "value": "24576:BwtED+lcsbq0ktTdEwGgU4+/ywQRBaWnBCqcZn+BY2:B/+csmLhdU5/ylRBaWnt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718705185, "uuid": "0072fa0a-7891-40fe-8e1b-7cd0a00ad061", "value": 1324544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705185, "uuid": "6303796c-7770-41e7-a71f-84dfec8a0905", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfeb30c0-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1718709316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709316, "uuid": "3e02608b-837e-45ae-bd0d-af27bbce80a0", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "3cb6e2da2c8e592db9bf3fa485b4126f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709316, "uuid": "b8d0b02f-2cff-4583-a10c-c73888d6da69", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "fe90e3c4b58cc172b88f554fc0059248dba63a14de60d044dcfd6dc9975cbedd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709316, "uuid": "d263517e-5bca-4a20-bed7-7e9e198c233a", "value": "T167E4BE5292F1AF10EEF7EB324E39C2A4262FBD625E36614D32743A1F39731A186517", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709316, "uuid": "28a36700-d9f9-47d0-a87d-21ccc6ad3053", "value": "3f02be335eba999de4248c772005a3aa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709316, "uuid": "3c49a348-cc91-4d6f-9190-f7f589adf702", "value": "12288:vxsH4XqLmczaPuWLmPembBW/XWKt2hbY3sQM:Zq4Xq9zvBvb0/n4bY8QM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718709316, "uuid": "11d8318d-0311-4329-ac2d-0df7c43b5dd5", "value": 658432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709316, "uuid": "b78f3458-aa05-443f-83d8-11082616fda6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c2e3bbf-2d5b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718705480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705480, "uuid": "cf579f68-247c-4284-811b-ddf74fca7f01", "comment": "Malware payload", "value": "d2a062c511d651f18f57a0b991cce1e6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705480, "uuid": "4fdfddcb-c4a5-4c71-b6e5-4bb81a79ba1a", "comment": "Malware payload", "value": "39bc31a8487b5c79f8f227226fb9735b85825905677e5ee5cb14cc69ec151606", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705480, "uuid": "379d5db6-2c97-439e-8f92-3a2520e2c81d", "value": "T1E3A48D5162F1AF10EEF74B325A38C2AC262FBD615E77524D32747A1F29B33A081527", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705480, "uuid": "7d80a25d-6a1a-4e3e-9c2e-e5dddd13a8c3", "value": "3f02be335eba999de4248c772005a3aa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705480, "uuid": "f165a7db-31f2-423f-9c93-342301230df3", "value": "6144:2L9YRNbFuLruzjdt3e5BOr/0apLwQH0eZyv6OVHPlgVdhst+7jPWA:2BMbYH6dt3yRz64NNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718705480, "uuid": "b9ce47f5-4c71-4ff4-af39-85b82932c62f", "value": 455168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705480, "uuid": "4b35cf4d-e0f5-41e1-b6fc-6e993391d040", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "815fdc53-2d5b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718705650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705650, "uuid": "11d2d77d-9e24-4616-958b-f1e16a6e8fdc", "comment": "Malware payload", "value": "4edfc9dbfac47589a5a0bc31bd48453e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705650, "uuid": "136ce94e-3d72-4a43-a602-6ea780f4f3ad", "comment": "Malware payload", "value": "87d27409bc16dada8d0a70b40400352f3d4d9b5fdb101d086902e00851b5c19b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705650, "uuid": "b3b75a0a-f34c-4ee2-8ba9-6cf3be6ae51d", "value": "T1D2159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705650, "uuid": "7e8890c6-9df4-467e-b93e-a8e6fbaeec6d", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705650, "uuid": "55cf1842-6aa4-4fdd-b6fd-0e5475ecba96", "value": "12288:PqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TX:PqDEvCTbMWu7rQYlBQcBiT6rprG8aAX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718705650, "uuid": "1f3be08b-3afa-4050-92f6-25f00c89e32f", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705650, "uuid": "fd8905ff-d435-4eaf-8f91-47c81ebd9c57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ea9a7d1-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718706129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706129, "uuid": "6d19cce7-bda9-4d29-92a6-ec5b56a58e2b", "comment": "Malware payload (Amadey)", "value": "9f32b93a4e5854ed769d0a2d810e4f04", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706129, "uuid": "faed3253-c663-46ba-8173-6caa20b8b02c", "comment": "Malware payload (Amadey)", "value": "11b953a042b7e12b94d4e948b757165f72bab8cc7e63d453a4ad93b3cf6919ba", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706129, "uuid": "3bf8879a-7308-4cba-90f1-0c2fa3d089fe", "value": "T1D1B4AE72A2F16F10EEF747324A39C1A4266FBD621E76524D31B43A1F25332A9C5D23", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706129, "uuid": "305e83c4-821c-46f0-b447-79d6bcdfc801", "value": "3f02be335eba999de4248c772005a3aa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706129, "uuid": "fd2df839-25c2-4ed0-b3d0-361792343bf6", "value": "6144:tLfR0UK1Jq4qi9XJbypYwOx34vd1h3PeNMIjMhTgiZJVc7bWA:tqU0NZbyiwe60jjMJg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718706129, "uuid": "2b0ea55b-6f7d-4257-bac3-ae5a09303224", "value": 505344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706129, "uuid": "bd3deec2-fd79-4de2-bcbe-ee9d3e8ff686", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34529212-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718708527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708527, "uuid": "bd346015-fefb-4e5f-b314-1e162a579e31", "comment": "Malware payload", "value": "6c5fb2e020d775a82813f2aa544520da", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708527, "uuid": "43da459f-fcb0-4733-93bf-91a54008008c", "comment": "Malware payload", "value": "c7dcfa676fae76abedb3fb1ca433d1a4b3f9aa1dda304a5a0024c4b2e7b083a6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708527, "uuid": "739f7e22-4e5f-4d04-9614-99c6d89b5f06", "value": "T15FE57E8B32DB9079FBAA606366F2779CD9F3D855E942000E4D845C4F79C88BBD7E80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708527, "uuid": "36a30d72-0491-41f8-8529-c2dbe5e606f8", "value": "49152:DUy4A4n/XX+shOz1GvpDqB6Vljzm4yBd2AHRbaffrAY:DZP4/XOs8BGR+BAljzpsdb+fkY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718708527, "uuid": "a2f5b210-b360-4b49-9488-3fc6ec5f00a4", "value": 3226140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708527, "uuid": "bb7a5cae-1c2b-4831-a63a-df643812e1f6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73f04764-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Nitol)", "timestamp": 1718709493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709493, "uuid": "033aca6b-c215-4315-930d-bb259880e18e", "comment": "Malware payload (Nitol)", "value": "7936c4064fbc9b69fba8b5f0d44a2482", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709493, "uuid": "709bc652-b0dd-4e78-92b8-6a63deaaef1e", "comment": "Malware payload (Nitol)", "value": "1ff3a794b0cefe6c10c3c91b93bb6bf5e58054a7d2ce51c987fb32a82d5e929b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709493, "uuid": "6d615951-d702-4648-b8f9-08d1bcbda935", "value": "T1CCD52382ED900139F1BB4970744A20ECE6B11DF22E65DDBF0390B7D5BA712B8B9325", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709493, "uuid": "5eae3791-56ad-45d9-a0ed-dc8753068d44", "value": "4a953c8bd157b2716295e2979b6789e2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709493, "uuid": "cfb986aa-f401-43d0-b615-ac3b48dfced8", "value": "49152:njt8sWSux8S7P4jqNPSqc1I6LcNx6fyW4WF1eGfaGf1W/FkGJZllE+wD:BPWSux8SAGSVcTQYq1eGfMdbzlbwD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718709493, "uuid": "c039fa6a-91cf-419c-b9dd-3bbe6b9b139c", "value": 2944344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709493, "uuid": "76c9a088-07e2-48f0-a5c5-bb9fc283fc59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7570e21c-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Nitol)", "timestamp": 1718709496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709496, "uuid": "20891644-fad1-47ac-8464-7cb65b5283f7", "comment": "Malware payload (Nitol)", "value": "85a9fa813d959603f677abfa3460739e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709496, "uuid": "92a805f0-5dfe-4ab7-9236-cfdcc9eac7f0", "comment": "Malware payload (Nitol)", "value": "499519ca1ed201fa19d78f02f4a05731070e639d6d41d13e9397323622ea88c6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709496, "uuid": "e6cae417-e138-43a1-9459-35e47a76f798", "value": "T116D523D6DA2402B6F06B45B0641620EDF5702EF51E65CABF03E833E67D712B5A8325", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709496, "uuid": "3d022251-5b7f-400d-8781-05bd9dee9b9f", "value": "4a953c8bd157b2716295e2979b6789e2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709496, "uuid": "3dc16be9-7d7a-4eba-a91f-051a9fa1446d", "value": "49152:E/y1vxvzSnQM2sS7cFTn36IW8K29zkY+ueSlSlsZJYfqybd2W6Vwx7hkbg9wE:E/BnQyS7Aq8p9zkJQlEsZJ6qaG2xYg9v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718709496, "uuid": "4fd459f3-8381-4aba-bdac-61ff135cf4cc", "value": 2944344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709496, "uuid": "8125c206-025b-4801-89fa-48177ae23f6f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "812a66e0-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718709515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709515, "uuid": "0ea41602-3949-4e8f-8d75-7efe193a492f", "comment": "Malware payload (RiseProStealer)", "value": "c72d55be83b295c39d635544d69c78a3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709515, "uuid": "1ee75bf0-27db-4bdc-b844-f40edfad49dd", "comment": "Malware payload (RiseProStealer)", "value": "74084ad54c43f0c7d521e9622dba67cac5adc525db24548f43718399e4077407", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709515, "uuid": "d28c2075-fc0d-48c3-a5e4-96b5a185f011", "value": "T1BC5533EC4047E6E3C916D3F48084F2A887B13EB453ABA202746F9A3655E849F7757D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709515, "uuid": "0b664a4e-21a0-4c49-aba6-bbdeba446698", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709515, "uuid": "3935d181-a51a-4704-b1bd-9598547cd053", "value": "24576:N+ByUFPTlo1vs7G/dCSgUnwQ+miyIakELhD+gZbmNrU0W0R:MBy+m1k7G0xUnl+DL8hqgZSgu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718709515, "uuid": "bfc8b7f4-2b34-4e4d-8b2b-12b4753dd4a4", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709515, "uuid": "1cbed2a3-b15e-44a7-a0aa-b6f09a12d5d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bad6894b-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718710042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710042, "uuid": "9fbdcabb-2051-4a4e-aa12-8c75aca989ce", "comment": "Malware payload (Amadey)", "value": "6c6395cf2dec8ff9b7b935ec51630e8d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710042, "uuid": "4d83cad2-0237-4bda-b3fc-7cc3b3fbd26c", "comment": "Malware payload (Amadey)", "value": "2bb79af2d6639da002450debd72516a0b267b4dadd74900151437fbbd4a80283", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710042, "uuid": "f51d3f02-7e43-4e1c-a932-49e64f84fc3e", "value": "T1639533608957B442C002C8B8DC5B7E523294F6DCEEBBE934CA3A4E51F997564E8F32", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710042, "uuid": "8d8e9f87-2b18-40c3-b34f-5d8febc773e5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710042, "uuid": "7f894486-1162-4cde-9221-479bffffa054", "value": "49152:7W118+JtWB9S1oZrf4Ii+6RkCNcDtm5cFyaWx:7W1a+Jtli4xWCNcY3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718710042, "uuid": "28c709d8-1fed-4b7f-b85f-56c48d04209e", "value": 1896960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710042, "uuid": "1f0a085c-e44e-4d4b-bac9-86284aab7e9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a2c475c-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718711887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711887, "uuid": "41cc47a4-5187-40bf-b3a6-8fedb8be1f19", "comment": "Malware payload (RiseProStealer)", "value": "631d22d35ea7c4e8d5cd757462bf2118", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711887, "uuid": "dd5fbd5d-eda2-4962-8236-7c33f69adc39", "comment": "Malware payload (RiseProStealer)", "value": "d0de15c509e50eb0cb75ba6be65f89faed2e11ff169ee98e4355fdfd7a610dca", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711887, "uuid": "d17eb211-5566-44f1-9d75-76b1f1a69ac3", "value": "T10A5533778212E180D1716AFD494FD0F08C4AF99B03CD8D1A2A5F2AD12E3A5DD67A6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711887, "uuid": "a524595b-c364-4855-bd9e-5f0bf60f2d76", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711887, "uuid": "1b1f72cf-2a0b-4723-b7b4-e266d267d596", "value": "24576:jxcaUtH2GrdU5zXFvIXOGyb4wQ9N2K3yWds0JkKyVGziUh8vl+:jQ2GG5z1VGyb4liadsLkeS8vY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718711887, "uuid": "d58bba86-1852-44a1-b1f9-eeff9f3c26e5", "value": 1326080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711887, "uuid": "df52916d-1239-46fd-b55f-139c21f263d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "938fb1c7-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718710405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710405, "uuid": "ab8c3c65-f8c4-46ca-960a-72ca0e6f4c12", "comment": "Malware payload (Amadey)", "value": "4fe61a341a290434607a7c7aeb466218", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710405, "uuid": "6f9fb87f-6591-4f49-a5ff-1de6b9fb7bcc", "comment": "Malware payload (Amadey)", "value": "6156fd388fbf3f69b8783230223e8101b1a56da77312d7fa4f565799d432b82b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710405, "uuid": "b2835423-9d6b-453b-a116-ea405f60ce36", "value": "T19C9533300EE812E6D69E1239CC86DBBB36BD7CC335719C12DE79952A1113AE84760B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710405, "uuid": "3cad983b-cf23-436e-9a62-c3d23cb3a655", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710405, "uuid": "91a08f45-2824-41c6-b920-1154020e79c8", "value": "49152:jB2lDhvkKOG8oqR6/EygFX8pF90YI5sG+01kLoi:jon2GP/vImVssGGLR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718710405, "uuid": "ec626735-28c3-4c22-ad03-9635ad883feb", "value": 1940992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710405, "uuid": "cbff253d-d093-4bb2-8881-dd7c6f635fa0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbaa99d8-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718710580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710580, "uuid": "6922c12b-ac57-4526-9fac-3ec17baed25a", "comment": "Malware payload (RiseProStealer)", "value": "320cb7b2c8d02a8b349e0746d5f1a412", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710580, "uuid": "a66b81dc-8863-4f7e-8648-e5d3a226556b", "comment": "Malware payload (RiseProStealer)", "value": "1ac50caaeef8ded3fddc4f252a76ea7cb976fa40a89cff18ce3609b477d079db", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710580, "uuid": "ede93b45-3589-4f0c-a82c-9c9427e973b8", "value": "T14B55336289752A63C132F677A5CCB5E04D2CFDBA5D524F0E6D4F406010BE4CF8B6B9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710580, "uuid": "78828995-d534-4970-b641-553065ae92ac", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710580, "uuid": "587c8b18-a66f-4f10-9bfc-4a0d04d38732", "value": "24576:D+zDLdvnqngqbwEzjq8R5wfYOUlzAJq7DEfsqpwQzCN2K3yWds0JkKyVvMsFk5PJ:iL1gVR5wfYOkzGflplradsLxvFkBP0ne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718710580, "uuid": "6d2f1a26-d35e-4c66-8344-6fb025031f55", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710580, "uuid": "c138b9ab-179b-408e-a477-7f38a23f387d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d0b3f20-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1718711173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711173, "uuid": "43cc03de-e524-4f1c-ad73-a49117adc513", "comment": "Malware payload (CoinMiner)", "value": "fbfbe4ee13baecac3e7d16bec24cf079", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711173, "uuid": "6d84946a-68e0-499b-9bac-8547cff0a998", "comment": "Malware payload (CoinMiner)", "value": "3d65e5f78fa228a79d279fd903b45e584effe6b680d3a3adcb582985de62d01e", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711173, "uuid": "2914300d-25f1-414b-b12a-24f7d7febb5c", "value": "T148C53384951180FBCCFB6AB57D893F9504693E90AFF495CF2DE02B3396E41E670B18", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711173, "uuid": "98be0bb3-77b2-44ad-b805-2db09dd6e389", "value": "de41d4e0545d977de6ca665131bb479a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711173, "uuid": "73aeea13-1df2-43f4-a77d-5fbc8db68083", "value": "49152:0GXNqt3/rQCbVuI1SjuNVASD++6ozKQ/hD5xkmIW3vFqbrBeL9SSKl:0Gm3/rQCbVuIioc9ihD5KmjteALgl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718711173, "uuid": "24dad5b5-b64e-4853-bb59-6a5b34503407", "value": 2608640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711173, "uuid": "831648ad-8c47-4a53-ac91-0c34695b58ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66a9c849-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718711189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711189, "uuid": "bb6e1ad5-0be1-4da3-9ba0-204bcc942813", "comment": "Malware payload", "value": "9bb6921acb6b115a25c6ca315cd34e6b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711189, "uuid": "5ad665cd-f1b9-4f24-b889-70f0a69fb1de", "comment": "Malware payload", "value": "411918690c1a55f4a499e832f7bbc9d77241545a6ca41eef6c269c764f01f631", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711189, "uuid": "cef99c75-6a7d-4740-a7c9-d9af44e5bc9e", "value": "T10B45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711189, "uuid": "4666cc1e-00aa-4d69-bd44-08d0fa7203a2", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711189, "uuid": "84340389-d4fa-4bb0-bc78-c23c7d3c584e", "value": "24576:uqDEvCTbMWu7rQYlBQcBiT6rprG8au52+b+HdiJUX:uTvC/MTQYxsWR7au52+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718711189, "uuid": "dbd742c0-7ef5-4985-88c6-3cd734b1eed2", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711189, "uuid": "f97d083f-e4ff-4209-b476-b82039415300", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1729bee9-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718711915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711915, "uuid": "fce3610c-0d2a-408b-b3e4-40db5f1772d3", "comment": "Malware payload", "value": "ab3caf1014de4406bb4f05060932176d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711915, "uuid": "64ccca0e-98a3-493f-b5cd-e6ede9f0905f", "comment": "Malware payload", "value": "78de9ad48bcc4c59de4df3571450152ca7a8c119b9e9a83b09d7ddcda8cc798c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711915, "uuid": "0fc1fd44-521c-4831-96cd-08ce148aa448", "value": "T1B5159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711915, "uuid": "a89f4a81-3fe2-42f8-93cf-52e865e620fe", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711915, "uuid": "b5e3f0a6-496b-46c2-b893-77f44d7529b1", "value": "12288:RqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tl:RqDEvCTbMWu7rQYlBQcBiT6rprG8aAl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718711915, "uuid": "8e35049e-edd7-4ae3-b363-baa846673375", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711915, "uuid": "d69cc4c7-ed1f-4d06-9b60-2314c80651e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "929c4cf6-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718712551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712551, "uuid": "58562745-5495-412a-a033-4e69e20a2568", "comment": "Malware payload", "value": "befa6ec7199742afacb57a836c374853", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712551, "uuid": "a3fdf0d7-0e87-42fd-a70d-d99d3d6a6007", "comment": "Malware payload", "value": "06f592fc63e163ed95a3ed797c64f4a029e95a90f8af1c4078be07f07215648b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712551, "uuid": "4b25ffbc-ce16-4a98-a0f5-4482a7b09373", "value": "T107366B13E361C6F5E154003152A793345E38B6B12D23EEA7E791EEF85E68A71DB223", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712551, "uuid": "854e1ad4-86d6-4e78-8990-1b60766431a9", "value": "6484a6f708fa37c8c0be3e0080079152", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712551, "uuid": "be9661de-8dae-410b-a183-43ddeb39c66c", "value": "98304:3tigyfgAFc6wxml9uE6jYa1vOB3FqZVUzSnWYqdwkLcHHSSt:3tigyfgAFc6ZMmNjAP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718712551, "uuid": "fa56506e-7725-4152-928b-71d508955cf8", "value": 4956160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712551, "uuid": "2b3f81f9-eb51-465a-9393-98cfaf42033b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9763e87c-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718712559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712559, "uuid": "fde0d9d7-b8bf-4090-8433-60afea94ca05", "comment": "Malware payload", "value": "bf49215c1be04035ea8a13b8936aa257", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712559, "uuid": "6904d1c2-3072-4531-905f-46c4080159e2", "comment": "Malware payload", "value": "cc5edc1c931811c9aa6f9f1c260cd5f2db3ec30306700d277e9063d2ab260f37", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712559, "uuid": "180be23a-6cc0-40a2-bdba-87bd1a9aa739", "value": "T16F36B103F042C4B6D51E1AB092B6D7396D788FA10A28D9C7E7D4FDB9BD366318B661", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712559, "uuid": "c5836b4a-118b-4113-8eac-dc4038d4b3e8", "value": "f9ab754bc9fa6a8282105e098246a54c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712559, "uuid": "2f7f703d-4724-47b3-b3cf-864d56495c10", "value": "98304:mDfqodn0CzoV7W7XrZmnJAv+V8FSrpJBAUZLX:mNd0Cz7cdg6JVr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718712559, "uuid": "1f2e5e68-4cc7-44e5-97b2-0286ecfbe032", "value": 5222400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712559, "uuid": "eef442e5-27f4-47ed-aac5-c7625b2aadce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de96bf51-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718713538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713538, "uuid": "81ec15ef-9bed-4792-bd22-97f947a3b5fc", "comment": "Malware payload (Amadey)", "value": "b84c9932a2222efd9ca45f4d96c20cd0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713538, "uuid": "81110859-bb58-45c8-b53b-da06daf03896", "comment": "Malware payload (Amadey)", "value": "3f057d41729ede50420ed52323bf31988be3d8621186c9f3aa769addb2f89fdd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713538, "uuid": "9fa4359a-328f-4211-a179-435c377cfe0b", "value": "T1E49533875F12BA3AC98C3475CD99FD34ABE91DA00D80C2668F0CD469D3D2EEAD3295", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713538, "uuid": "28bb5d69-5a87-4fc4-a411-9c78055c55d2", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713538, "uuid": "4801950f-421d-44bc-b8cf-951b4d468dbb", "value": "49152:crG+XDj+CFo2PieOtAPoyk6RuW572oqO8gKssG6A:MleCFbPiPtAaI7WLgKssZA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718713538, "uuid": "7809dc22-3931-46de-bc72-4675c4cadf76", "value": 1915392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713538, "uuid": "66e90d20-761e-4850-9a61-890ec09326d3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f78f50b3-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718713579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713579, "uuid": "8a5a367b-8e58-4336-9064-ac3ca616e675", "comment": "Malware payload (RiseProStealer)", "value": "cae8c3bede3a379791e8df604b3810be", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713579, "uuid": "da6c7b92-f9c5-4ea7-9746-b3df16666541", "comment": "Malware payload (RiseProStealer)", "value": "181962a1cb159f4233780fdaee11d9455de50168783b518e773a03e8a6cc4b1e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713579, "uuid": "0eb7410b-0750-465b-a476-6b572635f2d0", "value": "T18F5533F9B33BA746D82C1770165D476317A83C2C78A6BA24698F9C430CC1EFC6B959", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713579, "uuid": "4549e5f9-0fad-4ff5-a883-5b16b46042d7", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713579, "uuid": "77edd79d-4337-41f3-9fe4-52b901b10300", "value": "24576:IUS0tCwA6MoPAfzsu15zE1ykqQJOcwQHN2K3yWds0JkKyVO/PH20GxcpU8j4nf:zw1oPNu0IIOcl8adsL9xcpU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718713579, "uuid": "f3006bf5-aa55-41ac-b745-0b6ac9445387", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713579, "uuid": "fb778351-4d50-4bed-ab82-2fdf4b459ba7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f22b8e88-2d6e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718714000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714000, "uuid": "509de49a-2813-47a7-b613-f2420218212d", "comment": "Malware payload (RiseProStealer)", "value": "b52fd5b96906db1620558aa9516e79db", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714000, "uuid": "59d7385e-631e-4802-9db6-d1f1e2c4d91b", "comment": "Malware payload (RiseProStealer)", "value": "8f5656d8b5007d1127973312f6570556f65852b973bb2b06d40d1b1c9ec7615a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714000, "uuid": "2b08c70f-3c8a-4cc3-bd33-88bd0f299542", "value": "T1715533A8FEBE2534E69FAD70128FF790EC287D147A049E21A5AF25440CB446E27F6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714000, "uuid": "1325f9fb-bf28-4d43-b24f-1972e233f2fe", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714000, "uuid": "0e901b76-83a2-4af5-8861-69b100d248ff", "value": "24576:aOn3feVK2cGjG7fTEifwbgjN17wQrBaWnBCqGXo/YEk5j:n3feVKSjG7fAXbGN17lrBaWntGIdk5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718714000, "uuid": "71208ae3-ae45-442c-90b1-549717180458", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714000, "uuid": "f5dca865-24d6-416b-9874-b7514f54183c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9410dd2b-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718714272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714272, "uuid": "21692b53-41db-4667-b7b0-8c7bdb3405e4", "comment": "Malware payload", "value": "18beb678868060588904bbc90af632cc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714272, "uuid": "1d5fea84-6c5a-44db-b54d-19e6e9cfd265", "comment": "Malware payload", "value": "cc708614206896917f25caefbf57ba597eed8f9d4ccd89b73cfefbfe7eda2b1d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714272, "uuid": "9ae4810d-0c73-466e-a93e-40925e984c78", "value": "T1A5159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714272, "uuid": "4a27ebcf-c6e2-4279-843f-2109154230c0", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714272, "uuid": "2503414c-6797-4dee-8b4c-eebf7b0032c3", "value": "12288:MqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TL:MqDEvCTbMWu7rQYlBQcBiT6rprG8aAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718714272, "uuid": "95db634a-8f29-486d-87b0-7c2d1440c295", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714272, "uuid": "8b9cb467-b6d3-4099-a58c-920603f0d58b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb70a39c-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718714445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714445, "uuid": "aedb1b2d-ae8c-4732-8e5d-ae41b60043eb", "comment": "Malware payload", "value": "011ebbcd0f564355a0c87789d1994d2f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714445, "uuid": "2c5a028b-c6c5-408e-9e1d-83e566aaec77", "comment": "Malware payload", "value": "d713d26138293c3ea6bda1ac57babfdd2e2d01ff96114fc65680f0664558d206", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714445, "uuid": "810ae391-ebd8-4eb7-8e94-d3889d9d6a0d", "value": "T13745BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714445, "uuid": "86190066-92db-487d-8afb-462356be6c19", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714445, "uuid": "6754a2f3-4df9-4c17-bf9f-b05496c2adfa", "value": "24576:qqDEvCTbMWu7rQYlBQcBiT6rprG8auS2+b+HdiJUX:qTvC/MTQYxsWR7auS2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718714445, "uuid": "94c4beb7-d6ea-44c5-9ce8-2dc22047d72f", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714445, "uuid": "8c6b86da-b52a-4c42-94e5-a009d6bfd052", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b52ee05a-2d70-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718714757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714757, "uuid": "33a6906c-242f-4c1f-b9d2-0a76ae6b0ab3", "comment": "Malware payload (Amadey)", "value": "13e5872e9b7c47090e035dc228c5589f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714757, "uuid": "b77b21f5-620a-499f-83c5-4df3c66dc313", "comment": "Malware payload (Amadey)", "value": "d6cfb9d6c862be5a244eb5e4c6339312f74b7eb57cad8d08f56e3de0024b2bbc", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714757, "uuid": "65b9bd16-1ff9-49ec-b91c-11c7dcfc9d0b", "value": "T199945B203816C072C65192725E68FFB6C5EDAD259BB105CB77D00F7AAF212D26A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714757, "uuid": "5f4f97d7-48a9-435c-858a-291425594ac2", "value": "17fdfd4b0f74c4632463578cbbe1a2a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714757, "uuid": "e1e82124-41df-4f93-9677-e9a9790c2da2", "value": "6144:9O1rkNbOFsBuztTfSoRgxX+j14TGYoij7aR1XPQg9TU5YGmvST3h68BoKupOdCHP:3xBuBTExX+AoLzTUKdvST/BoKupOjUz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718714757, "uuid": "3d3ed4cf-b71a-4bea-a5a1-888137c1e3f2", "value": 434688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714757, "uuid": "18fc10b9-442e-4847-8dbf-2123e67019cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c15f6376-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718715207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715207, "uuid": "6558ed9f-d7df-48e6-95b0-465442e17e6e", "comment": "Malware payload (Amadey)", "value": "df4f6e4b9dd45826d34a405743f47f4b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715207, "uuid": "ddef9d95-dc4a-4930-ad40-04a580fca8e4", "comment": "Malware payload (Amadey)", "value": "d6105747d3d97f0202125567f82b2e04ae696dd101582fc288d69800abdf32eb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715207, "uuid": "9d77d22a-2ada-46e0-8323-7e32cc6ae50b", "value": "T1199533385E7086DFD42D35BB5F8A59EDFF619306E1CA1BA8034B4238F921B4D151B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715207, "uuid": "19c3a860-3daa-4f5a-b249-c50582923ced", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715207, "uuid": "c3394f35-e540-49be-8b79-4fc7c8cd2767", "value": "49152:LVVV7JkRK1YJUIGnmz8DPLoTMgYcI/6gRNq:RVV7JkRneIGO8PoTEbNq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718715207, "uuid": "3cf1bce9-ce36-430f-9c0d-f0fa5933a413", "value": 1901568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715207, "uuid": "9011663c-6167-40d0-9f08-71d8c16775b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e5d6982-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1718715470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715470, "uuid": "9251464e-3fb7-417b-891a-b7acca7c2752", "comment": "Malware payload (Blackmoon)", "value": "747544ce462218a85866cab52f9bb663", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715470, "uuid": "4bbfc7a6-a2da-4221-b6f0-9774b828dba2", "comment": "Malware payload (Blackmoon)", "value": "483fc1f640b6f0d8e8922929fb638c87511ace0f13b9a30eccb0f5f8a83c1c41", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715470, "uuid": "86a63733-2906-40e6-af47-1585c73337a4", "value": "T179355C23A120CC91D05816B21AEE0B3D6D78577118B28E47FBC8DEF5BE616729F5B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715470, "uuid": "c72951d6-7035-49e9-a2f1-2904eb471d34", "value": "0e1169d8f1a0fb79575a7b8b94c3e106", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715470, "uuid": "0e30852e-071a-4374-ad27-8b1305a5c304", "value": "24576:XLiRiMqkzc+xqbIEEzmZ+8Y21K5rOk2L68mftqXwtZVSuWDwMbwe:XLiRiMqk6ENkZJuWDwMbwe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718715470, "uuid": "727d3e9f-9cdd-4820-9b69-f5b8c52c4827", "value": 1145856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715470, "uuid": "50119610-d301-4750-926a-c15580733b70", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0a2b313-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1718715662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715662, "uuid": "34f1504f-3933-458e-9475-30212390de2f", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "689827dc96274f0f0836656381513b7e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715662, "uuid": "644b5de2-f509-4d63-b7b3-e82dd4207e40", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "1d51f77ce20a653ee169b15f5d7cea5ebd8d1646295570afa6292d91d3a90dec", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715662, "uuid": "f647881c-a8b5-4f45-be34-c705a247af6d", "value": "T183D4BE4262B1AE11EFF74F325A39D1A4AA3FBD225E77515D31383A1F29733A086127", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715662, "uuid": "1b115658-63cf-4b48-bd3f-8eb5b184bc45", "value": "3f02be335eba999de4248c772005a3aa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715662, "uuid": "de48d113-4bf8-4f9c-80b6-7071f0981dc7", "value": "12288:tz6MyjV0PkRQfP4YyCw5/MyT8IaW98KEWnsO:JFyVkkRWP4Y0rTZaWLEWs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718715662, "uuid": "cbfc6308-92ce-4ecb-8d49-6e67220b2edf", "value": 656384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715662, "uuid": "21a28b91-0449-46d1-aa13-385bc2d207d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d13d42f1-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1718715663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715663, "uuid": "9e9fea60-f02d-47eb-b45e-8c4142bfbedb", "comment": "Malware payload (Socks5Systemz)", "value": "dba13ab7e5e163970672806698bce11e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715663, "uuid": "c1370d70-b90f-4e38-8785-51b9838b051e", "comment": "Malware payload (Socks5Systemz)", "value": "01918a214c02b064345651d33c66077c27e77e19cb5b0cb359ecc9c2dc15d782", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715663, "uuid": "09c46b5e-372c-435e-bfa2-3b7a97072869", "value": "T172263354D1490C35D372FEF8CCBEA8896036F6DB5D750FBC3B2A56A78B012AC7119A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715663, "uuid": "1069fb5c-3c60-494a-96b6-3298142884b6", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715663, "uuid": "4f6c17d1-d521-4533-b23b-1a4d19f242c2", "value": "98304:mioqIDdl0emGn3loUlKnMc3S9PwY7a3PZCR0D26UExk78FP:MDDdl0ehnvrg2a3PZCRSCEueP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718715663, "uuid": "8b3876f4-b6ec-495d-b189-e7a55f0d26a8", "value": 4838065, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715663, "uuid": "8369aeb2-df20-40e2-8e5a-9708f282c824", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ea67ef5-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718715846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715846, "uuid": "ed91ad66-86a3-4aba-92f0-5c6de1f57b9e", "comment": "Malware payload", "value": "52251be9db3c249a21b437db2186a21c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715846, "uuid": "eeba0590-2d88-459c-a729-5a42c1f1fe0d", "comment": "Malware payload", "value": "2a3e1c948716f57abd9b601a7dc01da40a34c0c1e3535fe4db5bb482dbc2e1c4", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715846, "uuid": "2191b744-4620-4655-a482-7460643bfc0f", "value": "T15FE1E92BE01E6A6F9BECC9A6582927A83355C01680FD5F455F19634318F173FBA1CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715846, "uuid": "59a357ad-3137-4066-808b-d87218994830", "value": "192:y7ArDZNNS8PqF7ZCT2xkwlSvsbO/VM0QPl0zDnL:SArDYYqaTS5cKeL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718715846, "uuid": "d768c371-1208-4ea1-bd73-d1f6e0e7530d", "value": 7193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715846, "uuid": "55fbbcb4-db7c-4ee0-8882-3ffa17f99e8b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "decf285e-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718716544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716544, "uuid": "4a4bc156-1654-46b8-a071-a48e1e316fa9", "comment": "Malware payload (Amadey)", "value": "0a9a2b21fb2a5f8b18d925ca13ea79d0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716544, "uuid": "d1a6fcf7-a48d-4fbf-bfb7-5c36203ee2c4", "comment": "Malware payload (Amadey)", "value": "5f7c9b901567da2b14dcdab2bb4b14f80820032ef92340136368ef1a67426f38", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716544, "uuid": "ee7efe7d-8658-4bcc-af98-b55a02c30a63", "value": "T11BB4AE52A2F1EE61EEF74B324E38C2A4262FBD625F72624D3174761F39732A185127", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716544, "uuid": "b2fca772-c24c-46e3-83c7-75c8df94be3a", "value": "3f02be335eba999de4248c772005a3aa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716544, "uuid": "cf11b58f-3aec-4be4-bf3a-56e767585a1d", "value": "6144:gLQRLRusCvkjgDsxe1HfFEKZLfa/MOsqGvZN1GQOBMfjrYwiuA:gaR7Cv2gXtHLfa/M5fIQO+j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718716544, "uuid": "12b17da0-9723-4a91-9798-e8b3eb43895b", "value": 502784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716544, "uuid": "8236ec5b-902b-495e-bfdd-8c5834479a9c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e6bad04-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718717188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717188, "uuid": "1a81f96e-2124-459c-8b3e-7fe35be57e8a", "comment": "Malware payload (Amadey)", "value": "f2673d24060ff9f7e20f9a7789acb136", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717188, "uuid": "a7f9929e-6bb4-4ade-b4bf-5fee56f7f5cf", "comment": "Malware payload (Amadey)", "value": "14824440af3a95903ebf712a0a7e65273fd7b1d1f0e51554a249091501d00616", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717188, "uuid": "b449f380-0533-4706-bd03-ca4e4775dd20", "value": "T1EDB4BF42A2F1AF21EEF747324A39C1A4262FBD615E76527D31B43A1F39332A185117", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717188, "uuid": "a0ac860d-7fb3-4cd7-85cc-cdafd0d326c5", "value": "3f02be335eba999de4248c772005a3aa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717188, "uuid": "d3b72519-dab9-417f-a009-15d04a222681", "value": "6144:YLDRgcQraQP1z5ujOQRVHaBvGqUQhVU2WJLTWeGqgKnwhuA:YWcKaQWjLR4UQVKnG4w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718717188, "uuid": "b108ba02-052a-4db3-bb9a-05a1a4363ea6", "value": 497152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717188, "uuid": "b1fb840f-28db-4e25-bf45-86996ead0bd4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "151c53d6-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1718717924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717924, "uuid": "6960154a-f14e-4767-b475-88b09f316d16", "comment": "Malware payload (LummaStealer)", "value": "8da4bc4650c9ea58212ca25202b33743", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717924, "uuid": "88dda3f0-3c4b-4354-93d1-3ea7d449f422", "comment": "Malware payload (LummaStealer)", "value": "a9369a9513352e29f867305285a0869c472f81e4ddb39e408aaa1d1f4dd69ac5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717924, "uuid": "e7ddeee7-1e7a-4c0c-8c28-e1c6e4c687ee", "value": "T1B1A47D926EF1AF10EEF747326E39C2A8262FBD625E36524D31743A1F39732A185117", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717924, "uuid": "e5524518-5d86-4307-b1e7-6a5944f94d11", "value": "3f02be335eba999de4248c772005a3aa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717924, "uuid": "53a4d48d-8752-43aa-af23-4fcc687f2799", "value": "6144:0L2RelINSMlfXiIfjKAxtpt9GCF6INMJvFxgxfn8joE8F7FuA:05lNMlficjKart9nNMRFxgxPGr8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718717924, "uuid": "40ebe2c5-9945-4a6a-9e71-687c2a4883e5", "value": 454656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717924, "uuid": "10c7b098-1153-426e-883c-90a3aabced09", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fae9e1e4-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718718310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718310, "uuid": "39751cfc-c834-42db-ad5a-fa7841b18d96", "comment": "Malware payload", "value": "fa5fab4b0c3fcd8be57b8fe986a26144", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718310, "uuid": "2ac274d0-2375-4fae-ae22-de00e5f43a67", "comment": "Malware payload", "value": "d07cffcb095dbbfae372829ff5e7517e9c3a0bb4eeef43b6845910e5be1d55a6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718310, "uuid": "9ae47400-fe07-4b6a-a7cb-dfbad05c141e", "value": "T147C1A3D036A9817B0FD454C7ACAB02093022B5F3D5614F826BCD3CEFBC943368A448", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718310, "uuid": "11a62cb4-a685-4498-af7e-627cf7c4af87", "value": "96:wmGEpjnVVvxojY5gnKGzQXdpgNGU4kM96zvNwmwSytOPe4Rhimzs:wm1VVvxGLfETgQkM96zvNw7Syt94RcSs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718718310, "uuid": "650e8a12-1a0d-4a74-88c8-6993734204da", "value": 5636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718310, "uuid": "e33d9307-c6f7-42c3-8ac2-80aae3d58a3a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d3b77a4-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1718718367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718367, "uuid": "6b00f46c-daa4-4c5b-878f-849b34ce90e9", "comment": "Malware payload (RemcosRAT)", "value": "d6cf3eb7ee76a4c3b59c3eb1eab0f7d6", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718367, "uuid": "6f80ab38-50b6-42de-b291-3d349a896858", "comment": "Malware payload (RemcosRAT)", "value": "6da5a048f621a7650fadfeee061f29e6207f47eca742167a72d27f53dc2f0dd9", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718367, "uuid": "4a477c98-8280-4404-b084-0a9fe6c14598", "value": "T1E2A3EC2EE74F0954DF55967B434A4E4A05FCB33DB38540B139AC97343BAD82E4A628", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718367, "uuid": "9c78ce2e-38ce-411d-91ef-9dafbf3feb8e", "value": "3072:koqrWwXYxld+PRcyZqgLCrZsiM3S0sITuv4QPtEsUSn7VjSrC:koBHxld+PRhZqmJicTuv4QPtXUa7VOrC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718718367, "uuid": "85bb2b93-c150-4fc1-928d-b00dadac9e0a", "value": 102198, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718367, "uuid": "92fedca9-7937-4b6d-a24d-484e8a419250", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "409f0f33-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1718718427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718427, "uuid": "8e14c46d-60a2-48fc-b306-ae20c330e716", "comment": "Malware payload (RemcosRAT)", "value": "5ff8d84e5a1c5839ffc6cbf174a3cc6a", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718427, "uuid": "aaa4c7a3-c31d-404a-9f8c-740f96f50368", "comment": "Malware payload (RemcosRAT)", "value": "b91333da05ec26d95d576034b8df2904b97263a5fa7bbe15bf3e17ebc4e68f92", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718427, "uuid": "f59c1d4a-84eb-47c5-a7d3-7d74e667f8e6", "value": "T111A37B579203E539656358FFEB7CEE9110D0DE8ADBC89A8700FE4459ABD0FDCB2081", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718427, "uuid": "1c56764c-8e4e-4d85-99ee-f2823e4fc311", "value": "768:tZ6A3yXNA0AGAgkYUW6bsHTqYjCugsZh2NQiXAZO:tKW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718718427, "uuid": "74981c1e-3cb7-406f-a3d5-b55f8923cb05", "value": 102922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718427, "uuid": "444fa97b-b2ec-4f03-8158-e1147b34693b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42e2b0c6-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1718718430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718430, "uuid": "f77f4b50-4f7f-403a-a95e-59e5f988e14c", "comment": "Malware payload (RemcosRAT)", "value": "08475c0ab2386f3353d1c2f254a839c3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718430, "uuid": "e0d950b4-f634-4be2-971a-eb3e564bf649", "comment": "Malware payload (RemcosRAT)", "value": "d613abfde1e416e467b1b936060835b5dff7d3617cfd54dba245f36a214ddd6a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718430, "uuid": "39d9f73a-3873-42d7-8ab2-d0d5d450ca96", "value": "T173E5CE01E3A805A4D87BD734CA558333D670B9969732E54F0A8CD6462F73AA29F7F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718430, "uuid": "c0fc53ed-1442-48a4-8fe8-16f0f59a98ac", "value": "340d65ede751260b3cc3042ec139606a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718430, "uuid": "3ad89277-32b7-4da0-b438-92c6f0073dd2", "value": "49152:YgpOmgDQ06m3N051GXdJCXw5Y9ehIwM1A8ofwosSN7Wn:CDDe4Rh0HiK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718718430, "uuid": "1f1a7088-9357-43b8-a71d-9cc74c040c1f", "value": 3191808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718430, "uuid": "7ca355f9-e54a-4a91-a5c9-5aa5c8f7c22b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca232b40-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718718657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718657, "uuid": "14408769-0fb6-4717-bfd8-5c0cf049de4d", "comment": "Malware payload (Amadey)", "value": "57e68b382113428772a71e03521255c7", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718657, "uuid": "37f3a48b-22e0-4057-a676-83f6361fd0bf", "comment": "Malware payload (Amadey)", "value": "c67e6b1978a001d08c404d20a55f450829106bec634a50e81aafad9c0f1fb734", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718657, "uuid": "8a657823-0504-4baf-97d9-1b660058eb90", "value": "T1429533634706F9A1C08F29B9F8263F52C55E1B6C290D367787C0B7A87A7720AFC625", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718657, "uuid": "1ef1dc74-71ec-4088-9b78-47a74b91cddf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718657, "uuid": "7b875f55-3543-4e0a-82ab-89f2cf5718d8", "value": "49152:5zYSkQNMO/b1oKsgfhUXBQ648V/n5hY+MgLXx5+YH:SSXNBhoKsgfhU2ZGRhYOXP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718718657, "uuid": "12efadf6-aab1-4087-8eb7-cf136befb083", "value": 1922560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718657, "uuid": "035d7681-0294-4899-a6f3-a14b172fbbfe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c42c07b-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718718768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718768, "uuid": "953a279c-322b-40a8-a12d-01bee64cd2b6", "comment": "Malware payload (RiseProStealer)", "value": "1cc61e64a8d20e3c01cf39397c6740c4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718768, "uuid": "787f2046-0c46-47e4-9384-533e95e739b0", "comment": "Malware payload (RiseProStealer)", "value": "7728e7fc38f81e1b61b29350404b7f27fca7f32ad41a734bee354f1c4cb35610", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718768, "uuid": "aa79311a-4b95-4996-b6fb-dc172bab065f", "value": "T1C35533EC2965582AE26192F184AF837FA94D3C6A0B959EF43A4B70634F74DCFDF251", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718768, "uuid": "a64f681a-6041-4c1c-b998-aa4141c9997c", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718768, "uuid": "cdff8d4b-17d1-4427-ba09-94ff22add27b", "value": "24576:EGG7lBfDntEKA8h8ScAFAMwQpz+8wFsIdSES2:Exnf7+gh8ScQAMlpdIdBj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718718768, "uuid": "cb9d8273-8035-4391-a53a-69b506ae3f43", "value": 1324544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718768, "uuid": "f7d6b4e2-3c29-4793-af27-37d2c726ecf5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b133c19-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718719008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719008, "uuid": "56ceb2d8-5d84-47b8-a026-f17f94ebd662", "comment": "Malware payload", "value": "090c46de4f5e60e0a98ef07faa734ae2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719008, "uuid": "67ec1ab7-92bb-4aad-9823-762f0dc47e49", "comment": "Malware payload", "value": "ecc5cbc765c1cf157323e83430486140c90ca9321310d5441fee5858a59a5e4e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719008, "uuid": "067d1543-9d9a-4e74-99ab-580242b7a9e2", "value": "T16645BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719008, "uuid": "b31828de-c06a-47b1-9454-11bdb18c08ca", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719008, "uuid": "f08caf97-0c8f-4683-9fea-d8d410797d7e", "value": "24576:HqDEvCTbMWu7rQYlBQcBiT6rprG8auc2+b+HdiJUX:HTvC/MTQYxsWR7auc2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718719008, "uuid": "ae5997ca-1e6d-48d1-827e-3cc7a9c54416", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719008, "uuid": "15b7bccd-dfe0-403b-9554-434f31133039", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6de7252-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718719457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719457, "uuid": "07dac7a6-5ba1-4f13-858c-514b9b2bbbd2", "comment": "Malware payload (RiseProStealer)", "value": "b1d3e0447674ab007081aeb4faece075", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719457, "uuid": "006be60d-affd-45fa-aa14-8a24ea66af63", "comment": "Malware payload (RiseProStealer)", "value": "d73cacb3d2c59338267d5fc90ff804448414238621d7442b77a94d969d217a6d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719457, "uuid": "54c8d82d-7ad8-49d3-92dc-f503f61734cf", "value": "T1B055336C8027C6B1D52FEEB941AA41AAC738347C908B441A5DBFBA01147C4EFB7779", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719457, "uuid": "5a0f5e76-910d-4931-8b02-96b9b45527ea", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719457, "uuid": "20515765-f363-4ae0-9bd7-9f17f10287f8", "value": "24576:kXlpPqIV4tYkfXFCA5QF40QupBxqOwQVN2K3yWds0JkKyVIZkB5mnQ3v0lq5/G:kXlpPDqG40xdqOlKadsLWZkPmQcq5/G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718719457, "uuid": "b6def6e2-def3-4bff-a15f-8927c623a2cc", "value": 1324544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719457, "uuid": "2825aa81-a913-4e69-8818-f44b3b125703", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28a108b7-2d7c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718719675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719675, "uuid": "c9b697ea-5403-44f3-9289-bb39ea9bddfe", "comment": "Malware payload (Amadey)", "value": "08dd3dcb4d2d40f65a15fd94109f2dd9", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719675, "uuid": "4592591b-4253-40bf-9cde-e2c7a983a213", "comment": "Malware payload (Amadey)", "value": "f63a2ef322fc79f5b3feaf697d39b8f77044326a58cc262b56154b64da75106a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719675, "uuid": "09276242-e5c3-4cf4-884b-a40f74d3db1f", "value": "T15A9533A3CE90A431D86D9772C1D352686DE870C0C5EF86C5CB5A99B40C2ABD7DE4E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719675, "uuid": "4f7064da-d552-4fc5-bcdd-b7257c8e24bc", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719675, "uuid": "7009725d-eb25-4756-9a30-358033c4934c", "value": "49152:ii5Lqouwz/shedLoSzJUFy+Jr4umMgAvk:ii5LqoTBLQWuvgEk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718719675, "uuid": "ac8c9b45-82b5-4901-82c9-0bec048a70f9", "value": 1897472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719675, "uuid": "2daf2d8a-8bfc-4c09-be69-896269a7c52c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ef1ba9e-2d7c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718719947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719947, "uuid": "61110766-9987-4ab7-a2e4-1a540b8a9848", "comment": "Malware payload", "value": "ab05cda9363b4f59d623e601f4ebcdb6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719947, "uuid": "add40dae-c8be-4e9b-b9a8-40665c4aaf53", "comment": "Malware payload", "value": "c469d7cc2cf79285c8fd008890270d36d15ec0663d29fcf3ea23b050f32abda2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719947, "uuid": "0116317a-1c5a-44ed-a511-13fdad82266f", "value": "T108159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719947, "uuid": "7f2bd174-3185-420d-8c7a-7afee37144c5", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719947, "uuid": "45a46382-c15d-4f15-bd12-63ae235bb5c4", "value": "12288:CqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TT:CqDEvCTbMWu7rQYlBQcBiT6rprG8aAT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718719947, "uuid": "af373419-a2e6-4c37-9351-85ff10e3e061", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719947, "uuid": "2b2934ac-1187-4d42-82de-b0400d00d49e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06ff20f8-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718720048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720048, "uuid": "96537eb9-e6d1-4c11-bd01-deb756bc5c5e", "comment": "Malware payload", "value": "5c113a11f7dad696477920c387c6b280", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720048, "uuid": "abf55204-d864-4fde-a63f-cfc4a24d2e0a", "comment": "Malware payload", "value": "2e29e96f0e4351c6d51c2c8c1b9d2516fdebf0627427985a8f1f1345e6860e88", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720048, "uuid": "01162fc6-64be-4e1d-bd9e-4806ce66c2d7", "value": "T16E5623BBAF1D646C35191E6700AC17B8C7268741D55C8D5002CC5EFEBFAB1FAAE08D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720048, "uuid": "cba40d67-95d3-4aa6-a824-6352eafd2be6", "value": "196608:pnNFkAVd/OZ4IoQLqbRh6XBp7wz8eZufKh:pnTR/44IoQObHipdDfKh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718720048, "uuid": "cc6b240b-1f4c-41df-a2a9-2f547c7b5055", "value": 6454788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720048, "uuid": "9e14314b-7fb7-434d-8084-a12cf6627138", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cebc2a2-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718720111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720111, "uuid": "ba64e1ec-853a-45bb-8ceb-a9bf6797c844", "comment": "Malware payload", "value": "0dda2a251706a653e7ce5a141b93fddc", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720111, "uuid": "2d4144b0-4deb-421d-81ec-f1b9a8879dda", "comment": "Malware payload", "value": "eca118ebef71b32d26ea1d39de1afab4926b63c212a7b61b176a07282656154d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720111, "uuid": "9e65f952-f857-407c-b597-7b7cb2e45299", "value": "T108A4E0CDD65526B66BD75AFC090F3AA738959BE9C320E3825F8EA47F64605B930C0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720111, "uuid": "b05209f7-4d35-4c2a-a64b-e14191db9035", "value": "12288:q65KqGO43gYkO/ErYg5AJRoHAR/Z1BXaI5lC:q6Um4wYk5HAFZ7XaI3C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718720111, "uuid": "5e64e43e-4834-4b68-a0ff-54b07b413300", "value": 449540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720111, "uuid": "7a129bff-9bd8-41a4-b221-566139659533", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4693f1bd-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718721872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721872, "uuid": "dc0f3c11-3f64-4f3d-b52e-84642acd659d", "comment": "Malware payload", "value": "14cbe9223703ba57008597eae54a649d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721872, "uuid": "cac2b28b-b2c2-4ea0-b98e-fd31257cafc5", "comment": "Malware payload", "value": "257e5beffe7cc422f2ec7b639bc73f2885f90f54511a371332a89fd10eca2738", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721872, "uuid": "7a01dfe4-7dea-41bb-8cd3-e77669b43e53", "value": "T17E31318D74228F711B7DC4BC75C4358CA58B96BF89175FA4F047B4AC285C36830A4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721872, "uuid": "6deb2853-21f3-498d-a1bd-df275d9b1258", "value": "24:xCz2zlIQLNS4AltrM35BFRDD6n0LY83H0tfhhp5wEliodZYDYc7QW:0yh9LgztonmzfvJlBZY6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718721872, "uuid": "30bf8550-1de3-47ba-868f-bd50c15e6fe7", "value": 1598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721872, "uuid": "4cb081f2-0fcf-43fb-b8d4-4ac321e268ce", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb24ac34-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718722605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722605, "uuid": "bdba286f-5441-48b3-a9aa-be8fab59a83d", "comment": "Malware payload", "value": "ce7dc5df5568a79affa540aa86b24773", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722605, "uuid": "a5d8e1c4-0263-4fe5-8268-b9a5ba91949f", "comment": "Malware payload", "value": "0af21e5bdeaf84c33c172a1170987cca478c2b3e13a3de5653f724f36e278ee4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722605, "uuid": "d49e9416-3ad8-4ab8-a4f9-b9d068220124", "value": "T1871502CADD68227AE1B714B09817A5DCEAB50CE11A3CD97B03F607C579722B8A5361", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722605, "uuid": "3ecd1aa7-a52f-4ba5-b410-18d1ea3726bd", "value": "33967a24a261bf787771766b0c0f449a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722605, "uuid": "a73cff49-1240-4874-a3cb-d2babc2637c8", "value": "12288:7BxGT8EnlLPCyyOe+9kN62Ijrd1L81nVPxM+xS7Tb+rdgg3bTpyN7JGp8wgKCp/y:7Bx0lLPLyOQNf2ryn8+MfG/0F+8lKRlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718722605, "uuid": "ab9165cd-f701-425a-baad-6f051e142669", "value": 909312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722605, "uuid": "68781998-60a0-4019-a1b5-a55f69f1c2bb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90857c39-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718723476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723476, "uuid": "56d3ad2f-f467-4009-817a-8f213e80fa4a", "comment": "Malware payload (RiseProStealer)", "value": "8fca88e2fc0f89dead64a3bd3f333e82", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723476, "uuid": "3423d59d-0dc4-4ac2-a795-efd3034fad47", "comment": "Malware payload (RiseProStealer)", "value": "b7f4523d9fd9035171310e5231ac92c4ae1c9e29434aca5bdb75a507d895af03", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723476, "uuid": "b0e66338-1b1f-4f14-9f30-b471ea9405f6", "value": "T1245533FD03DFF111D114D1B5AA1286BE2F94BF8A534507270A5F324A0E127EF17AAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723476, "uuid": "07133a46-c336-44a9-b9ea-f6afefa401f0", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723476, "uuid": "7b98bd5a-3e36-4fe4-8b1a-7979daaff137", "value": "24576:IimtEn+sTsaTzo/njYCeZ805uowQEyEvOS31HWBxegZbmA4vpeF7pvR:ktE+sno/jYCQfdlDSM7ZHVFp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718723476, "uuid": "02f78f92-b3a4-47a5-92e5-a9a947e1c71b", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723476, "uuid": "ec26f2f1-95c1-4e87-a924-76a603c8b531", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b329326f-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718722914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722914, "uuid": "272d7ac9-a234-4255-856c-ac14eebe70bf", "comment": "Malware payload (Amadey)", "value": "5cb24c125b68ab8b49a491c9212a64d1", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722914, "uuid": "29541438-4a3c-4918-b86f-a722fb18272b", "comment": "Malware payload (Amadey)", "value": "71d4c550ae082cdf4cd969c09855cf19c55e472c30f8b88a9f0c0cd2ebb96efd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722914, "uuid": "a9f6ebb4-19e4-46ac-be89-580b784cffa8", "value": "T14085330D3DEF9EE8D7E1C77382598344FB78E34012601ED9AA5123E9A4DB742ED92C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722914, "uuid": "81639861-49e9-4145-9bff-35c5cb1ac6b8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722914, "uuid": "7f8b8a5a-0d69-47e4-a041-5f9c975ad9c9", "value": "49152:aeLeF+eP+SOrftAQFV64768BI6V2inyYZuSNKAztAc08:r8+SOrlhc476YI6V/zKEtP0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718722914, "uuid": "e2b1b756-a494-4a7c-84d0-54bd6f6f3144", "value": 1837568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722914, "uuid": "67e99732-50b5-484a-9839-3e787ed234ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11d80227-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718723073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723073, "uuid": "b64c9831-49ce-49f0-93c5-241afc1efc54", "comment": "Malware payload", "value": "e6906414433761a57240345dc4b4f7d0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723073, "uuid": "d85c5fdb-6099-49bc-9829-9ef03d4b4461", "comment": "Malware payload", "value": "4f05f735593eff90dd074ce4b1007100966f4f347be0b7dd0faf192ce5862efa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723073, "uuid": "727f6993-e5c0-45b9-a477-6e7f36d140ad", "value": "T1A345BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723073, "uuid": "b94396f3-365d-4125-8287-3899f889002a", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723073, "uuid": "98225caa-fc39-4ea5-b008-b47bccdf5278", "value": "24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8auJ2+b+HdiJUX:yTvC/MTQYxsWR7auJ2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718723073, "uuid": "950e925a-1f7d-453a-b8e1-a5d3f2b193e8", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723073, "uuid": "bc7ac288-f8f5-42c2-8fd3-19f1b8a4a47a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32f256c5-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1718723128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723128, "uuid": "9c78f8f1-db99-46a4-aab1-96368565e12d", "comment": "Malware payload (RemcosRAT)", "value": "c37e66ac7c43e79fd1c771892d457314", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723128, "uuid": "252b3a82-a82b-49ce-bcf6-0eb8e5cdfc45", "comment": "Malware payload (RemcosRAT)", "value": "98d535788e6259e120304b34b5029e369ef3f49c37179ecf5d1734194b4d94ec", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723128, "uuid": "2ed48a03-07e0-4463-93ad-e6336e7b7d09", "value": "T1F0A3106EE34F0915DF55A77B434B4A4A09FCB33DB28100A179AC977437ADC2E4A628", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723128, "uuid": "747683dd-a4a6-4e08-90fc-d44ab0bde8b0", "value": "3072:CEnneEoePfQ4Nz7tOZsIbOpw67uZ6llCCK:CEnne+z7wZsIb1QuWET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718723128, "uuid": "058d93ec-2fb9-47bc-9454-9580196c3df6", "value": 104070, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723128, "uuid": "67148414-7d40-41b6-a061-dde110c84295", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e1565e7-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718723254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723254, "uuid": "d978984b-3a35-454c-a9a7-2b063dd0eedb", "comment": "Malware payload", "value": "ecc2eb803579cb81bef67e433574a160", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723254, "uuid": "a1f0b80e-44a5-4a06-980d-c7a74d21d9e0", "comment": "Malware payload", "value": "1e4e074372c9cc0cc5860468851f748ec3c1c6b169e1dd638dfcb81f8b685eee", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723254, "uuid": "6c04f473-ae5a-4a14-91f1-4dc9405f85d8", "value": "T18D159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723254, "uuid": "85da6b87-493f-4843-b72d-4b9132b1a77b", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723254, "uuid": "b592a917-a336-4d51-b26c-18bdf4ddf7e6", "value": "12288:WqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tj:WqDEvCTbMWu7rQYlBQcBiT6rprG8aAj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718723254, "uuid": "78740751-c67a-4c75-8318-1fd0657f6369", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723254, "uuid": "c60bc9df-8564-4f8b-836d-d8ee19ef0f9a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb9e687-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718723415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723415, "uuid": "613a0f8f-ba54-41a1-838d-4df8af812b17", "comment": "Malware payload (RiseProStealer)", "value": "89335661cc583b05c79dab42b6d35ad2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723415, "uuid": "e40d0077-4640-4cab-be46-cebe9d9e6551", "comment": "Malware payload (RiseProStealer)", "value": "f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723415, "uuid": "6c24e6c1-0ce3-471d-b8c7-9e516bd679c9", "value": "T1195533BC4B2B5270D370B2F9DA560AE20E8D7F0E9781696387CF7A7006281ED27555", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723415, "uuid": "0f40c880-efc8-4ac1-9191-e72c21e1aa18", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723415, "uuid": "acd99af4-e582-4eba-a753-3fe8fa00f471", "value": "24576:VJBR8kj1mjks77XZ9vg9GjnKfwtDtWWcDxQTwQVRHW/nSTpY9ToU8oP7:VXR8AkHZ9Y9GeiDt/cD2TlVR2/STGhos", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718723415, "uuid": "e1c4a853-dcf6-4fef-b45a-234820cbe361", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723415, "uuid": "2f9c4b73-5c9e-4ff3-b978-375fd7674e08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e9f1b7e-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718723577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723577, "uuid": "9df2d454-051d-42c6-9643-e70c318efa96", "comment": "Malware payload", "value": "351f7582b1b5051f12f5bb572c454359", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723577, "uuid": "1872af14-f16e-4d92-b3b4-44c9e0f3ff07", "comment": "Malware payload", "value": "bc2397ffe321171f7e505e9b80731bb6993a1172a3df6f55eef6f2a797fc0655", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723577, "uuid": "041da287-ef8e-4c4f-9efc-b525f9208553", "value": "T1909633B322696085C1F5CD36C42BADF4B2FA4A9BC94198785B95BDC23F22DE5E3131", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723577, "uuid": "e6e81b0f-a98e-42a3-bba6-6c6d81309908", "value": "cd67a2c80f6f7884502f52242c5210a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723577, "uuid": "7b3a28ac-632f-452c-bb59-396a0b4d5017", "value": "196608:hOTRlwSRb5Sxxuhl2QA+uHQSuLb8hl62x7TqyU:UTRlwSVYntQA+2QSU4hB+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718723577, "uuid": "3a479b8e-260c-4011-a792-945f36d85001", "value": 8998912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723577, "uuid": "ad93f833-8a15-4ab7-9484-f4e7a4d31343", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46952e18-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718723590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723590, "uuid": "a081b642-db96-4abb-be54-f0fb521ea7f1", "comment": "Malware payload (Amadey)", "value": "c937d55d6dcbd955a49067cf5fa0c957", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723590, "uuid": "683a9127-ce1d-46a2-99ce-da5f99b8db11", "comment": "Malware payload (Amadey)", "value": "18ca58235d9254530124dd49979f54c7f44f8a35ce322f769a88c75a63ffda3d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723590, "uuid": "fbb9a294-746b-4542-b0f3-ce82eb566410", "value": "T14E9533075F6793CEF29D1BF0FECBE8929158107DA8370E27291AD52204F7964CA946", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723590, "uuid": "ed857ece-075b-4794-ad7e-e0663becdaf3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723590, "uuid": "66da1a4c-7736-4051-8064-b1971711d4a4", "value": "49152:TRNqk9xUmZEn21js8AwsrsRhixlXewBI:JUmZEoCHrsRhixlOmI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718723590, "uuid": "9cbf1318-6055-4542-b280-db4af0eb89de", "value": 1908224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723590, "uuid": "b9e82f69-e8d4-47db-b789-87e2f48a84af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b32065a-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1718723625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723625, "uuid": "6db0f0a4-a9b0-4e3c-9290-aab4b74cc9c8", "comment": "Malware payload (RedLineStealer)", "value": "3fa258507f8d951562c2860e4cb758d0", "object_relation": "md5", "Tag": [ { "name": "7zip", "colour": "#0b8d16", "exportable": true, "hide_tag": false }, { "name": "Mamut", "colour": "#2af2c3", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723625, "uuid": "8fecf800-df30-4036-b87d-31e562d7f9d8", "comment": "Malware payload (RedLineStealer)", "value": "f6995e391af1e544389ca2867341243a220038218b81ff8f365394b2a0bcd671", "object_relation": "sha256", "Tag": [ { "name": "7zip", "colour": "#0b8d16", "exportable": true, "hide_tag": false }, { "name": "Mamut", "colour": "#2af2c3", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723625, "uuid": "23eead1a-a9aa-44e5-93be-42a71a460196", "value": "T191973393528FD9A8817475C682BA644337347DF183B254223AA35F578C71CE0B6B7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723625, "uuid": "14d7ce4b-4a2d-4dd6-99f8-42f76b0cb166", "value": "786432:tF+t9p+yshctd0rN4MpFcF8zS5f0jzaQ6Io3joPAC6p5sJnR8c+F0Nactz4SXJ4T:b+D4Ktd0rN4MO/cjzaSSQAC6piJnRc0m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718723625, "uuid": "318965f6-9ea4-4eee-a673-7281c21e1018", "value": 42698930, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723625, "uuid": "7d332116-6959-43f2-9cf8-e4284b3b4a73", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9c07728-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1718724186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724186, "uuid": "a8c15282-0359-42fc-b5a4-2cb08212fb5c", "comment": "Malware payload (PhemedroneStealer)", "value": "9b452c0c703f20d6092be28a257ac391", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724186, "uuid": "ff569fda-1d8f-4bf4-9523-817446715692", "comment": "Malware payload (PhemedroneStealer)", "value": "0a03e2a72c3dd45f44f88f7686d7d341e76d176baae2480079fa0dc9d5f844ee", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724186, "uuid": "d17e0341-0a28-4359-a113-aeef170293a4", "value": "T1C7C32A3C26DB0D55E16F9EBBCBE8F4A98A75D993450AF6BA0C820ED20F52F404D135", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724186, "uuid": "14ab3ca5-a7c1-40d3-bf7b-f38a8fab9d35", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724186, "uuid": "c3b82a8b-bd61-4471-86fd-6486beae3663", "value": "1536:lr9TeZRDy8hZy3RRCGy9B1FKny6dgbe656cxLNfWdng2lKht4:596ZR+jiB1EnHds56CW6e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718724186, "uuid": "82725c5f-ffa1-4f45-adef-dc91d6acdfac", "value": 118272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724186, "uuid": "ef745299-4ced-4ba5-8a07-b0628355f9ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa10a672-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1718724187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724187, "uuid": "bf324911-445c-450e-b16a-b4bf5f5a4671", "comment": "Malware payload (QuasarRAT)", "value": "1b27e622f4edbbdd8fc93a0d1c129607", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724187, "uuid": "89262aa4-06b3-4d2e-9f56-adbc24bdbfa6", "comment": "Malware payload (QuasarRAT)", "value": "164e19d48c8d3ed423d4d4c68dff47899f375b6ef4f2a27005562e16b3a8d33f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724187, "uuid": "24f54042-235d-4621-9778-1b1a179b1a5b", "value": "T10EE54B1477F85E23E1ABE277E5B0541263F0EC2EB363EB0B6191667E1C53B4098417", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724187, "uuid": "071de383-5f44-4eb3-98f6-e3f10cdab337", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724187, "uuid": "95a4de81-1eef-4951-8e68-f4fdad6c0c40", "value": "49152:kvHI22SsaNYfdPBldt698dBcjHn30LdBhJo2d/UTHHB72eh2NT:kvo22SsaNYfdPBldt6+dBcjH30nv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718724187, "uuid": "7868ef63-a254-4f57-99be-f04874f58ebc", "value": 3266048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724187, "uuid": "01e03d0e-300c-4e79-8c69-5227b387eb3b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "582783de-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718724908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724908, "uuid": "7aedddea-6d91-411c-acb9-80bf81f4729f", "comment": "Malware payload (RiseProStealer)", "value": "a7b1c4fcf3ad5d820a2b4a8ab63430a0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724908, "uuid": "07755556-971d-45dc-b765-a04235e122b1", "comment": "Malware payload (RiseProStealer)", "value": "7f85cf546a684f757bc33dc4be00b794c76bafdc6cb07e8305922cc1cce812fe", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724908, "uuid": "8d08d3b7-0224-40c9-ae41-23e3bd25e349", "value": "T12355337C52AFD69CF408D2FE31DA432D072DFC4A29C964132B4F96589861B8D13ED9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724908, "uuid": "5c4e56c4-85b2-41db-8ea5-dfade4ecb99a", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724908, "uuid": "f3cc3533-74fe-45cb-a7c8-3fca31ce7aa4", "value": "24576:n/Lza6uCtmB57lkNPQJfX7eaFHiwQkRHW/nSrzkN+:n/PNbtmB570ge+HilkR2/SXkN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718724908, "uuid": "1ee82433-a1f6-4cdc-9e76-838112b831e0", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724908, "uuid": "e4ca4dd7-0952-412a-8736-07f626dbb0fd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0847e1a-2d89-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1718725486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725486, "uuid": "25775118-dafd-4521-89ee-91afe5f1592a", "comment": "Malware payload (Socks5Systemz)", "value": "042ac4b275585a13907767b36be3d0de", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725486, "uuid": "f930dbda-ea2b-4634-bde1-cb812b89e0d1", "comment": "Malware payload (Socks5Systemz)", "value": "fabd299e9399a5a35cf2ede8a607dfb9823c169c59b5be1a392478e5c50122a9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725486, "uuid": "75d965e6-ea6a-4866-9680-4654c6dd8443", "value": "T129263341E0CC8437E506B678AD60C051926B56DB607CC865326FAA475E9F3FC90AFA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725486, "uuid": "50850cf7-378d-41f7-b026-371b07378dcd", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725486, "uuid": "d312b52f-86cf-429b-97b9-758cd70b70c4", "value": "98304:m30YLQhdXrY2F88AoDppKH+Vn6x9u/sZA5iFYsnHc/4Y9Pqk2tpemUP:4sjFECpCI6x94sZuiFYR4QA+1P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718725486, "uuid": "3ece60a4-0019-4359-bf75-a01502db39ab", "value": 4673669, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725486, "uuid": "30d17b54-3c21-434d-bfd7-29c7409bb082", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00cc758a-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718726480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726480, "uuid": "3225d0a6-4987-4d7d-8a0d-9a8c088dff7d", "comment": "Malware payload", "value": "7d84387caca8fd39bf8e63791e6adad5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726480, "uuid": "b2e1383f-99c5-4123-8883-86d5d2fc1079", "comment": "Malware payload", "value": "ae010a778333ce84d4e15ad716009d291f6f90ea5d800cc9920e174f1e9ed811", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726480, "uuid": "fb5ef160-18a2-48e1-bc6e-f18c6a42965f", "value": "T104863827ECA149E9C0EDD13089628162BB71BC480F3567D72B60F6382F76BD46EB93", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726480, "uuid": "efd01ae3-c662-46d5-a68a-f1f2cb56ff1c", "value": "5929190c8765f5bc37b052ab5c6c53e7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726480, "uuid": "7950e9b6-6409-4164-8fad-e952c12e57d4", "value": "49152:sXtKiyvH6VlQP/nK+BzBnG3BLPDJhaejswQm90Eb6Cj25EWOoY9oeunjT9AChSbO:MLyvH6C/nKIiTaejsBoyE88tgFGeS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718726480, "uuid": "4b675011-0d84-4d70-83c2-a1ff0db53acc", "value": 8215040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726480, "uuid": "1feca65f-ca51-4340-b397-da40069646d5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7650ffd-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718727726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727726, "uuid": "0b89384c-1c65-451d-b9c2-abd05a7435d3", "comment": "Malware payload", "value": "d29041f6abff56c14c2b890591f12664", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727726, "uuid": "4f3a0e65-2277-42f5-bbcd-13f9608a1e6d", "comment": "Malware payload", "value": "16e1fd26b8daa17b87e548c02b394acfe05341edb5e6719cda09e48c61bf849d", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727726, "uuid": "1850bdcb-11cf-48bc-80f1-24964cea4046", "value": "T18794BD348D862FB4FE66A9B47FEF3501AE212A3FAF55026FF4162B82C490745C587C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727726, "uuid": "a5d46784-349a-4d69-8448-8fe5d2ce9fd0", "value": "6144:HozhZTe4GCQR/cFykLEImoXuRGBD8c2IVABIjvHsgVkEIxipgnE5T0lovV9nKW:HoViCAEykLEI+RFcFVAOH5Ovipg0Mun", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718727726, "uuid": "016a3e0b-4f30-4cf1-aba8-a82c4600c68c", "value": 438460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727726, "uuid": "3a104f25-d51a-456f-98b5-4d3bc0ad5ec1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b0b389d-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718727786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727786, "uuid": "a2e3fcf9-797d-4066-a712-a241a7ccbd28", "comment": "Malware payload", "value": "ed89f808be3c8a350de34ce755601f42", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727786, "uuid": "344e9b8c-ff04-4950-85fa-ec5a4800f9ad", "comment": "Malware payload", "value": "be0928aa1363205b1a36cb659d4813a8992c98889071ef621a406322029f10b5", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727786, "uuid": "dce3c4bc-a4f2-468d-b816-449ef600b9dc", "value": "T1764423D993326BAFBF99457A4F94599331320AB1E3511DC339E61160F0BFE9CB8258", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727786, "uuid": "c98a3864-f4eb-408d-bed7-f64b5433891c", "value": "6144:q1r146hZqSCgiKiHT/HfQ9b1coK4KqaugltvoGcqvly9sSB0wae7A:u1nh0SCLKiH7HfQ9bTK4YptvokSu7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718727786, "uuid": "de5291b2-762d-4084-851d-3d7614273cc5", "value": 271936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727786, "uuid": "c2d56012-bdc9-4f0a-91fc-a961c378907d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da513e8d-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718728133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728133, "uuid": "240ec76d-553c-46bf-98c0-7d63b0be502e", "comment": "Malware payload (RiseProStealer)", "value": "8674ff0454272b30acb7f215a3f9ac49", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728133, "uuid": "f8ce35bb-081d-468d-97ea-8188ea4a6f33", "comment": "Malware payload (RiseProStealer)", "value": "adeef67b62b4bd907bbb08732af7c09bef28af8f4b35fc38f8f9f736d5f7bdfa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728133, "uuid": "1091f8f1-e993-4558-9f69-f8cb452cf3f4", "value": "T19555337C83268D47EE6DE2FCD480529D80143F9B58195123289F07F36526BCEA697D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728133, "uuid": "8da37e61-c721-4358-82f7-46a5d200142a", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728133, "uuid": "99616378-e7ac-454d-b64d-cc3b9a063703", "value": "24576:Y4Ou12NrLF5eq5QNCIrkDqSXKDqSv2Hf3awQusiK3QXQ9aOl5Lj:vcvFoq5QNBMKDN+/al73Q6aOf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718728133, "uuid": "b69ae682-260a-4c33-b2bc-c8be7b0b2294", "value": 1324544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728133, "uuid": "4f790947-5a77-4ab1-b381-52190ef1a52c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bcaf4d5-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718729007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729007, "uuid": "6d123d5f-0ccd-4eb8-9183-4c145cbc7381", "comment": "Malware payload (Amadey)", "value": "2cb64fd483b220e3d975f8d91b893ff4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729007, "uuid": "88eff6dc-305a-4527-b4ff-f1f6c88544d8", "comment": "Malware payload (Amadey)", "value": "849b247af4df762767b6e582d3913b1ad247d626a9def2e7951d5fe98b4b21c1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729007, "uuid": "517e9e9d-e3f2-4e32-b56e-6ee11f088133", "value": "T1518533E318E9972FDD5694B372477BA86FD8932213F21030D816E6B94C6A3D4A51FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729007, "uuid": "0bc499ae-91b3-46ce-9dd1-577c09b60be5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729007, "uuid": "6b143e29-367d-4546-888c-3063abc70d63", "value": "49152:BZsfY/U7cORsn7ZFMR88cwdBF9kZlgB40uVOVA:3acHn7nm88JbZBGGA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718729007, "uuid": "2931159c-5393-4249-b7e2-77bb8d797964", "value": 1867264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729007, "uuid": "f39d4b0e-8d15-4460-87b7-bfa8e76d872b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f366d93-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718728410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728410, "uuid": "94966e2e-56b0-42c8-ae21-6e762b39778d", "comment": "Malware payload", "value": "8ff9a99991f34b3bcb010351afc1ea25", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728410, "uuid": "12a48a5b-19a4-4dfe-bb9e-3a8bb870ccc7", "comment": "Malware payload", "value": "ceb3f9322ae71d8bb7e0113f042e4fcf0cb7524d6cd8bb087c237956554822b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728410, "uuid": "e8d30eaf-1e76-4231-b25d-325d383510b2", "value": "T1C645BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728410, "uuid": "ff9a4370-efb2-441a-bac2-2f2897373ea0", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728410, "uuid": "9defe0ab-346d-4bfa-8890-47cd4bd4868e", "value": "24576:wqDEvCTbMWu7rQYlBQcBiT6rprG8auJ2+b+HdiJUX:wTvC/MTQYxsWR7auJ2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718728410, "uuid": "a1b76a6b-a8b8-443e-bf5d-f8d7699360b1", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728410, "uuid": "9ae5dbb4-6ed1-411f-96ea-b2807e6ea8ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04a5256d-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718728634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728634, "uuid": "08d10029-edc9-4977-be8c-e3f272e99802", "comment": "Malware payload (RiseProStealer)", "value": "fe31633ad31042c51065473f3861c54f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728634, "uuid": "8f362ac6-088a-4338-b383-26c7d4370fb8", "comment": "Malware payload (RiseProStealer)", "value": "ab36b46e982b25cf114f6713699fe0ba1528ca934202f122d5150b21658c1b0a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728634, "uuid": "0df62ed5-ad43-49c3-87dd-bd6ad779e28b", "value": "T1AF5533EE1B67BE80E1A673F7850F0B60DD94BC34831CB774526F6A7C886518E5B478", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728634, "uuid": "18a2edbb-2ad8-4c23-baa0-da49f4b22fbd", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728634, "uuid": "7b0e51c4-ade5-4342-ba76-35b1971bf83b", "value": "24576:3HeCvfGkeska3YClo0BihrGtPchG6BYUhfugLwQtBaWnBCqbdAe8qC+A:XeCvfne7Beo0iPbB9hfjLltBaWntmMC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718728634, "uuid": "950fc0f8-7fc1-4d7e-b8f6-16379778c72a", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728634, "uuid": "64adc9e3-0787-4a8c-ba95-c9f287ae63ac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8041c901-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718728841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728841, "uuid": "37c31961-4411-4a4d-ab62-fa3a4c19aa72", "comment": "Malware payload", "value": "447dcbe91772012bda9d0ecaac7b3708", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728841, "uuid": "eb903f46-2d28-4a06-a954-d71cf692e08c", "comment": "Malware payload", "value": "17a1221833184ef3a675d46ad35f937fc61a2703a695c0446a23d5d2ad8933df", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728841, "uuid": "d985b9ef-0eb7-4fd3-bbd9-bc792cc00b9c", "value": "T1B6159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728841, "uuid": "49b853c4-7999-44aa-9c53-bfc9ceccb11a", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728841, "uuid": "c00ea1ae-85c9-497a-a611-45e4a07827d6", "value": "12288:TqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tv:TqDEvCTbMWu7rQYlBQcBiT6rprG8aAv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718728841, "uuid": "942d5fb6-1408-4330-8ee7-973fc3bc4987", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728841, "uuid": "def782a1-6fe9-4708-ba72-ba5cd3c936bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b37d3148-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718728927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728927, "uuid": "64a5df5b-c085-49dc-9e67-fc5faa80e073", "comment": "Malware payload (RiseProStealer)", "value": "f8401c95a41f0f00810cd832dca818d0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728927, "uuid": "3bb7ed56-e1d4-461c-ae0a-623da1dc61d3", "comment": "Malware payload (RiseProStealer)", "value": "98ce0d502c6cf196a771a1110c59d8d0b07fdf0b8b43c8b3d810b9e727b56873", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728927, "uuid": "20300481-4cea-4517-9eeb-d02cbbe654b8", "value": "T132553364B1354B77C574F0FC845459B82E1C3989A680BA27C35F01A3833DA6E736EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728927, "uuid": "0ea12b59-39f3-40eb-96c5-13d05ef899c3", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728927, "uuid": "fe85014c-37af-4ca4-b627-eec622e8e398", "value": "24576:XY/nsoh17k5KvCe4XPV4CnVCBqoxYkr9wQMRHW/nSiT9FmK:ysoh17YKvCemNVgPr9lMR2/SiJz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718728927, "uuid": "f71eb088-e487-49c7-a765-7ee94a200379", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728927, "uuid": "a8d929b9-7ba5-44d7-9bff-f0972a5a2a03", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eef7ee50-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718729456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729456, "uuid": "3ccde623-e7e6-456a-b09c-5bdc97c62989", "comment": "Malware payload (Amadey)", "value": "7e74e441f49de3ca47a935d3f1352a25", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729456, "uuid": "88fb2cfe-1deb-4370-8e0c-3c3baa0fdb22", "comment": "Malware payload (Amadey)", "value": "e3d939b8f74dc55bfbc79f22d2d8da96d8304e6352f4d1a5f866e8735a53f3d9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729456, "uuid": "09d321ce-ce27-475c-9b02-4a7f9a7ca625", "value": "T1DD953321EE218048C55FDE7BF9CD669AE29EF8A682DBD4036F470465092F7D53E304", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729456, "uuid": "5d7a9ec2-6474-4f7e-8e99-76a417305dac", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729456, "uuid": "0f6b9790-6cfd-45ed-86b5-ded85636ab31", "value": "49152:Ve5dGyZJqrPenY1Ll9+1WB529ifv3xww5rwvhRF:Veb0rPeY1Lv+1q52UffxZwvhr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718729456, "uuid": "21aa96cd-b1c9-4589-8a94-233b4446746f", "value": 1885184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729456, "uuid": "5095ed16-5a9d-4547-b379-9ff61ca11d25", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddcccac8-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718729857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729857, "uuid": "23ce6037-2f4f-4912-b6e4-2460341775fa", "comment": "Malware payload (Amadey)", "value": "9f0642f84da5ea8bad4afa9a38a1af23", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729857, "uuid": "ecd74b13-fd10-4ddd-9c75-a8f0f4cb4ab6", "comment": "Malware payload (Amadey)", "value": "d771a7effecc16133c07f8abc28b07b8501bea4df8d2bcea95f178437fdd3ee7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729857, "uuid": "b47a2081-bec5-4b9d-a092-35968746b6ae", "value": "T15DB49DD2A2F1AF30EEF74B324A35C2A4262BBD22DA77614D3274761F29731E185527", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729857, "uuid": "bad65081-5798-46f7-8f48-cc1025d1eab5", "value": "eb4559a6ab13ae48fed5742731d48fd2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729857, "uuid": "58ec9c94-a994-43d3-8036-e97f0beec557", "value": "6144:QLoRBmJqEbn2x30I3oROSyBVLmsMeD9ykKRsGpwFK4IQRUAQtshBUrw5Az:QkmIY2xEIYOSy3qsB9aRsGGgQaAQ6PQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718729857, "uuid": "ee4fed9d-f480-4c80-adfb-8bf76be71bab", "value": 502784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729857, "uuid": "9a4d5897-231d-44f4-ad98-8047b54e3f79", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94c77d14-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1718730164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730164, "uuid": "73e406df-c515-428f-b23a-dc7601cb9fd9", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "581db72a144019408b36ab8e015fdd68", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730164, "uuid": "54acfa41-aeca-453e-b7a0-20ebb7d56d4c", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "0a38b80eb68a2dc6003e9db65d3dd1b5798cda0bd731d811317ffd5b5d6368cc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730164, "uuid": "6963aac3-db44-4dcc-aaff-be76d5dee955", "value": "T1CBD4CF9262F1AF21EEF74B324A39CEA4263FBD625E77514D3178761F28732A086117", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730164, "uuid": "2051f190-c7d3-481e-b80f-f2fc9ddc6f75", "value": "eb4559a6ab13ae48fed5742731d48fd2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730164, "uuid": "e5e4cbe2-896e-4040-ab6c-e622c2dc14cb", "value": "12288:/DmwKqWG4ntm6CbxS7VtS9LErMxerytoS3Dmp3flWHPdu75:LdKBtpCbg69LLxeOKwDmfGw75", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730164, "uuid": "2f427f5f-d36c-491a-b73e-fb7af97600a4", "value": 656896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730164, "uuid": "a0b5ebc4-7ce8-48ad-a6a7-aa45f5aa1c0d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78cc21f2-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730547, "uuid": "40265afe-4431-4814-8d7f-f72ac3038c9a", "comment": "Malware payload", "value": "30a833f838e2c597028d44d67c548699", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730547, "uuid": "7079f6f3-e1e9-401c-a53e-938064db18c6", "comment": "Malware payload", "value": "e42ff864f72fb03d35c920dd3392f8bc3c25f3383fe7a6ee38af649736adfc0b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730547, "uuid": "03091e59-1dda-4218-a383-f56e28839a13", "value": "T1412120150C4B5227267AC8B0CE112444F15FF187A60868E3F26669915A5D20DCFFFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730547, "uuid": "b1d24637-638c-4de2-9bf9-235ec0002a75", "value": "24:wBpzHOeI8H+prQyRMaekVHV0e/9uDN1XCuw1HXR1nJs3zOZAIq58SUjGv:GpnI8eTeMl+HrwlBMjOK5Zn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730547, "uuid": "caecec71-0665-4d34-91b7-8bd82179e1ed", "value": 1376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730547, "uuid": "86e085f4-3849-4bd4-b0ea-b84043b207d2", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79074197-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730547, "uuid": "ba78758c-38f2-40d9-bfc7-444775af0a50", "comment": "Malware payload", "value": "c348551fa8fea00106049dd9ff8c07c0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730547, "uuid": "b312d41e-cf1e-4a74-9674-c20e25f22808", "comment": "Malware payload", "value": "daf42dd32dc71b3f6439b4cbee4284d6104ae894ab758e76f8ff12542ba038bb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730547, "uuid": "46d2024e-7efa-4092-9b8e-e67092f55062", "value": "T1CD51DE21BCAD5217D930B5706A1E6D41B287AECFA01C87B731E8111FA607B4DE4FC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730547, "uuid": "de36fb84-d91d-47fe-825c-9207b98be0ec", "value": "96:+P9ls0NWZFWBnFLwFYOnFOdWZLwODpiji+qxWf4NjmCOId:uzgAmDpKId", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730547, "uuid": "6ef459ad-8726-41a0-b612-fb1d5d596f2f", "value": 3083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730547, "uuid": "f736f52b-8bdf-4ac9-bd7d-b963e5978321", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79de32ec-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "07f7279e-9a39-47be-a141-ede3a1a8070f", "comment": "Malware payload", "value": "db819dea3acba598de293f7158604bb2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "2f2e56d9-3007-44de-9a65-823d25523f02", "comment": "Malware payload", "value": "674053cb90fc0954d6605d2b2572214c99a0acdbd7f80682217e2df3ea4a8b8e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "c43f9b76-bf5a-41b7-8888-f82000474ee8", "value": "T10351ED21BCAD4217C930B5706A1E6D41B2C7AECBA01C87B731E8111FA60774EE4FC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "4d7ae9ec-8abf-4b38-a97d-ffcfe9668c0e", "value": "96:3S9lDr+WZFWCnFMwFHOnFOdWZLwODpiji+qxWf4NjmCOId:izAAmDpKId", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730548, "uuid": "82f7fb7b-5cef-45e3-a0b8-4ad70eadf307", "value": 3083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "26024c4c-44f4-407e-9e64-be68ed31c9a4", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79da8519-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1718730548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "afca4bd9-7e03-4689-85de-526f3f95c69c", "comment": "Malware payload (VenomRAT)", "value": "abd903204f59ff6cacecdfe31b70a1b9", "object_relation": "md5", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "f7ee8a2d-c45c-4187-a3fc-728077c40b5f", "comment": "Malware payload (VenomRAT)", "value": "f513d263e64eddbd4e71dd6ca9652be04ebcacfa423e3d3b4046f1bd3fdc23d8", "object_relation": "sha256", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "b9e643ca-4037-429d-80a6-c3a53ecdd25d", "value": "T14E734A003BD88D26F2AE47B9BCF251070EF4D55B6516CE8E7CC410DE5B66BC58A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "9a557849-36cd-44bf-a56a-a72197864f24", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "0f4a34a4-d77e-49f0-bc07-710bb294c0b2", "value": "1536:KKUUPcx9FbKHoPCdLR33s3qbQSM0ThEPMwlFRBgz7DAdAEH1bxbjXkwzUYbVclN:KKUmcx9FbKHo6dLR33s3qbQSM0NEPMws", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730548, "uuid": "85951e9f-a1e6-4955-87e8-46c33fd6e8b4", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730548, "uuid": "0c3fb173-27dd-41d6-a388-8f9045717a9a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b8027e5-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1718730551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730551, "uuid": "c25fe3b6-8d4e-4e10-ae19-9e1b28537968", "comment": "Malware payload (Formbook)", "value": "02e07416de23472dfcc5a97ea6c94fab", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730551, "uuid": "fda4cd1f-fed4-4d74-868e-6b0d4bc14143", "comment": "Malware payload (Formbook)", "value": "2921703b5b2148ca96cc58270ac0adeaa7842687c1c05b09cf439940d1ce43e9", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730551, "uuid": "68521f65-094d-4d10-bd61-bba1aa11d80c", "value": "T1CBF3EA3C29EB2C55DF3B9BB29FE8B4A5CAA5E211451BB27B084312D74F03A418D174", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730551, "uuid": "f8fd7625-5cfa-4459-b1ce-ee52a8e2edde", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730551, "uuid": "89a6c380-f043-4b46-b268-1f736117ac49", "value": "3072:P2oSgerNIGKoThbHnr5nZUgiVSO+fJ6+W0k:PVSNNIGK2bH3UgiVSO+fJS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730551, "uuid": "5b60f268-c912-4d9c-94a7-7f8770dd0968", "value": 164352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730551, "uuid": "b013f101-efa9-4370-8964-329a0802a463", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ba9bc10-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730551, "uuid": "a300619d-fb53-48a5-a1d9-004c609d00b6", "comment": "Malware payload", "value": "74991911124510c1f17b469f076bb212", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730551, "uuid": "cb1cc0f9-98a5-4f6e-aff4-101a0cf5dae4", "comment": "Malware payload", "value": "3ee420ca645a8d3e8fe730c3585b1f8bf9d2cd2394043c2a52eb715e90b9cbda", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730551, "uuid": "6f9337d7-601e-48bd-8824-1e3bc30374ea", "value": "T16C61DB6279AC4257D961B5206B0F5E01B287EADF601C8BF732E8010B6203F8DD4FC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730551, "uuid": "b8267957-e42a-4d7a-b240-cce3dd97e852", "value": "96:uF9l2qzWZFW3nFlwFiOnFOzWZLwODpiji+qxWf4NjmCO7:Mz4A8DpK7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730551, "uuid": "6502c70f-2ec6-4d69-843f-d4b47034aebc", "value": 3220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730551, "uuid": "0654e61f-5b12-465e-9b5e-32dc2fc8b12c", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bd7bb51-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1718730552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730552, "uuid": "1166168a-9f8a-4bb7-a10f-5707272e7ab8", "comment": "Malware payload (PhemedroneStealer)", "value": "9260f5e80678b6490676270838c08941", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730552, "uuid": "ed53f6d6-c462-427f-b3fc-65c1482deb98", "comment": "Malware payload (PhemedroneStealer)", "value": "81e99ca58577796d708d682e7a3807f507d9f650307a15033835116c28b149f7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730552, "uuid": "2c8c85cb-52c2-473b-9b6b-61813c505268", "value": "T1B6E3281877FC4E45E2FF8F7C7CB452914BB2F8269929EB4E0C5851EC0AA1B848851B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730552, "uuid": "a48a29bd-f892-4528-be70-b561e0647850", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730552, "uuid": "879854ec-bc5e-4776-84ca-f19b127c49a1", "value": "3072:nywhuhNC38S7gzQ/cGD4UdYs2sbyYtLt/w/HOWJbG5vcX+1kwEKEAm31D1:+zQ/FnbyIw/uWJbGF1REKQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730552, "uuid": "93aabc1f-3297-42b6-af17-7ecbdaf8832d", "value": 147456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730552, "uuid": "4e8d6a8f-aa30-4239-a3a6-4bc3e90baca6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7be5546a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1718730552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730552, "uuid": "4d9248a2-0cb9-4dea-92de-8f9ef9028de4", "comment": "Malware payload (PhemedroneStealer)", "value": "1137bbb4cba39878cec6719df21630df", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730552, "uuid": "54b2044b-9038-41b5-8f20-e20e8c88540a", "comment": "Malware payload (PhemedroneStealer)", "value": "de9738bd66cf075e2de53f21c2bcc5b79709c68e7899e9ce3c045ff485e8d499", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730552, "uuid": "c811c928-7536-40ad-83a5-f77cfce203fc", "value": "T125E3281877FC4E45E2FF8F7C7CB412944BB2F8269929EB4E0C5851EC0AA1B848811B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730552, "uuid": "5a0c7a28-7211-4ba8-a741-38b76ea9601c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730552, "uuid": "71a63477-13b0-43d2-aaa9-4b722708ae07", "value": "3072:EvsbYzhuhNC38S7gzQ/cGD4UFA72iGgWLt/w/HOWJbG5vcX+7kwEKEAm31Dt:ysbxzQ/mrGZw/uWJbGF7REKQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730552, "uuid": "3acf8154-bd65-49cb-bd3f-f0cf184c5f94", "value": 147456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730552, "uuid": "35d7830a-86fa-4c84-8757-ec6761c7e10c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c578a90-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1718730553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "b2c476f2-ab18-45da-9eb3-048800ee706b", "comment": "Malware payload (PhemedroneStealer)", "value": "e9ce544dd1a0e690ed8625f68782e936", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "15838051-3b59-4f12-a447-ad65dab83a71", "comment": "Malware payload (PhemedroneStealer)", "value": "6a27cb6bb25ff5f29a46ee7cd9a81d4de0ceb5610f843e9153da9eac9a73ef6a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "dc29a9db-ec86-4104-bd71-93e2abef45af", "value": "T1D90409246DEB4919E3BBDAB4DBD8B4AACE61D211550DF7AF0C4602D24B23F81BD031", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "52701691-a3e9-4c50-ad29-794a094e9347", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "bb9e0956-f700-4fd5-9ab4-84d2246826b6", "value": "3072:ep35iNSuKhNC38S7gzQ/cBD4UA0Z2hvCHb0lMy8elZ5K3nQEbG5LTsOAidKjNW4q:NNUzQ/UsvWolZMQEbS1dKjNFut1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730553, "uuid": "83415a42-5863-4f57-adf7-1633608566ea", "value": 173056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "ab075a50-3969-4c2a-afd0-a1b2e522854c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c5b0eb8-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1718730553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "41005ac9-3c41-4aba-b4b2-7fb68ad9747f", "comment": "Malware payload (VenomRAT)", "value": "96fd436f2e19e2b73942d2020df62970", "object_relation": "md5", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "2edca6d8-26f3-4f54-9703-0a03419dd8ff", "comment": "Malware payload (VenomRAT)", "value": "4a165517f5415fc61d91c06d2d0d9d00b2c77a6a8419617eabe91c967f180fb5", "object_relation": "sha256", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "3f8309ab-843e-42d6-a1e6-d6713dc32157", "value": "T11E735B003BD48926F2AD47BDBCF162070EF4D55B2016CE9E3CC454DE5B66BC59A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "e881a909-83dc-43fc-b480-5314609e2bd1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "e33119e6-b1c4-4854-ba40-19fbacf58c74", "value": "1536:aKUUPcx9FbKHoPCdLR33s3qbQSM0ThEPMwS/eqmmRhdWVH1bfbJIpT4wzUobVclN:aKUmcx9FbKHo6dLR33s3qbQSM0NEPMwL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730553, "uuid": "7dde32ea-6629-4bab-8fad-db4ebf175075", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "ed231edd-0563-4ed1-8b12-77ae0e2b9719", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c8d5516-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1718730553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "c0c204bd-ed83-4c4a-9c26-e5637df889ad", "comment": "Malware payload (PhemedroneStealer)", "value": "a9f33c6ea314443e52c1f1d37acd0f6d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "e1de701e-53ca-4e39-af62-2c64fc22d6f5", "comment": "Malware payload (PhemedroneStealer)", "value": "3fdc03614a8b2caa08574a25a97f7e08b1d6297850cc5ebe716a877c99b86e6d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "009603e2-7b7c-4460-b5e1-0533c5464cdc", "value": "T1F4E3181877EC4E45E2FF8F7C7CB412944BB2F8269929EB4E0C5851EC0AB1B849851B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "55117f30-a792-4019-99d0-55f320dfbead", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "83b18f96-179c-4b47-940b-709e1caedabe", "value": "3072:hdwTO61h3hNC38S7gzQ/cRD4Ucau2jOhnLt/w/HOWJbG5vcX+7kwEKEAW31Dp:yzQ/LiOHw/uWJbGF7REKA1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730553, "uuid": "32b111f2-4555-46f2-83d2-f16b4a452be9", "value": 147456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730553, "uuid": "676c2f89-81dc-4435-920f-0265a1e7ba36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d1b51b2-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "8f15bf66-9d25-4770-b007-1fbe5eabccda", "comment": "Malware payload (VenomRAT)", "value": "0073055ad7552b19ea9a239023318374", "object_relation": "md5", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "204ac9ab-a0cf-4b14-b297-7f20625a0bdf", "comment": "Malware payload (VenomRAT)", "value": "24624fbc08819d03d65e7620531753c2d1ae208d8c7293fb096799effa2f59db", "object_relation": "sha256", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "e3e02156-7d75-47c9-a424-dd816c313616", "value": "T17E7349003BD8CD26F2AD47B9BCF251070EF4D55B6516CE9E3CC410DE5A66BC68A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "31fa4a20-480f-4e10-9c67-83f70a2235f6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "08cd33f3-c171-4ea0-8a0b-5ffe7ac3953f", "value": "1536:KKUUPcx9FbKHoPCdLR33s3qbQSM0ThEPMwgFsBOwCOpdABH1bXbmP8UXEwzUYbVS:KKUmcx9FbKHo6dLR33s3qbQSM0NEPMw8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "ce1aad2f-0fd7-4783-8ea5-5d544c2b61e8", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "5e0a7dcf-8ba3-46fc-b309-18c3094f505e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d32614a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "295eca1e-4980-4a29-bdae-a4507843f3fe", "comment": "Malware payload", "value": "d31d65a28dca61cf4a21ba5020b60e83", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "bd3720f8-bd9e-4098-bc9e-45fc6b6c5c88", "comment": "Malware payload", "value": "92a7fe2b03068c2f6fedca98128924bf37e1b379b181569000cf94401a188577", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "f7dacc2d-df8a-4ece-8e75-7e90b64a5829", "value": "T1650533EB652B92DBFF4D483739F14E0A54405C3A3BB5ED9FA602CA12DA255284133E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "6bc4b826-7354-4ad5-ab36-edb7c739c895", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "95641117-79f6-40cf-8ab0-173214510932", "value": "12288:Ebbie6BPrmHLC1d8YnYbQwJ+Uj+WDOY6pC2IykSBsdw1v3lzm0Xs/+W6O9TeRK6Z:AMPrmHLCLs9+urGBsCfP8GWHRe99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "4a4669cd-30e0-4522-af7f-fc10056b1d57", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "635dc1c4-0dc3-4da6-a91f-f75d8c90093d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d314d56-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "eeaa6d6c-4941-4fa6-9a96-3e63ab4d98a9", "comment": "Malware payload (PureLogStealer)", "value": "7b099cafaf5dada250f611dfef156cdb", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "aa0d3e32-3d35-4794-acbd-41aa9ebd9971", "comment": "Malware payload (PureLogStealer)", "value": "0830d3544414f99b0602152e3c873050892021e3f64f5fd4664cdef8902712e6", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "4c0a3379-7f01-4597-a2d2-c6c6234dc38f", "value": "T19A0533684BF16BB2F50A64710AEB4E06FAD49EBC9C9E7676FB18BFE1650243110E50", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "f6f76f19-84bd-439c-924d-e3415bd422df", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "12a28813-49ce-408e-886e-489543124814", "value": "12288:vnMnNBsD/RVWVCW0U++kYNe4yf/zrMusJNA8jIEIGtqH0gGoiPBs7KRJO4hq8SJ:EB+qoJUe4izGXApx1FiZhTYf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "2c711497-5748-4dfb-907d-9fb5018e5d39", "value": 856576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "3c68505c-b117-4eee-9548-4e54171df097", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d2f368a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "465db48b-ccfb-4b84-9dc2-53178b104eec", "comment": "Malware payload (PureLogStealer)", "value": "60b4266cdb4dc9b44d595677680a94f2", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "ae7402d8-3ce7-48bb-9a3e-d03665f61681", "comment": "Malware payload (PureLogStealer)", "value": "797d26b3674ee0fcacd3cb945437fad630bee75f847603dd47b86e775850803b", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "9bce77e8-ff8d-4ac7-a141-f5a8b748bba1", "value": "T1FF0533417626116DCC8C5B71DC2854C338762758BD02FDBB8A3E52932EEC6CE6E9D1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "dc5cff81-b37b-4187-b6e0-453b62326dbd", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "890448d3-6629-46d1-8551-66c40adb7e90", "value": "24576:f4RIxJ+BqW7ijtBveSCYhlA7aAe+kd09K3cBjq/kif6KJ:f4CupECYhlCN0d098", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "00d9ba96-a6fe-4465-bd02-39f5c5ae1892", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "312c10c7-ae4c-4693-81d0-cc35119964bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d592de1-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "b2feb0d3-f6f9-4f0c-9a4c-40699b8bb357", "comment": "Malware payload (PhemedroneStealer)", "value": "319218e4eb0d6637a76668a228e32de3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "bce51f25-4407-4e3c-bb10-773184700218", "comment": "Malware payload (PhemedroneStealer)", "value": "3bb41473ee7e39b74fc96fadc0551780dbb08190c540c690e11b492952b33358", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "1c7e789a-7f43-4654-b20b-7e4314d7ce59", "value": "T123E3181877EC4E45E2FF8F7C6CB412954BB2F8269929EB4E0C5851EC0AB1B849811B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "5d260bf0-256e-4ebf-86df-247aacb6f1d2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "57d0699a-0433-4328-b76a-673d7525dda0", "value": "3072:HGNhvhNC38S7gzQ/cmD4ULz82nyLOLt/w/HOWJbG5vcX+skwEKEAm31D5:EzQ/2my2w/uWJbGFsREKQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "40373de7-e631-43b3-a1b7-f8ab02085787", "value": 147456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "355e7198-0d44-41f6-bf41-52355ae0535d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d5a7cbf-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7324e20b-3666-4020-88cf-b0cb7b406b0f", "comment": "Malware payload (AsyncRAT)", "value": "c4e10100c5cf7bec2d9d0a1d7203ddb2", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "8e328083-733b-49fc-8742-0cd8e71de42c", "comment": "Malware payload (AsyncRAT)", "value": "fdc933b64df0832a1f88f0e19a4cab67fb110d54c4913367a7215d7890f8a5b7", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "28d05bd4-3c86-45d6-952a-c66c37171555", "value": "T1839429002BFC862AF6BF27B9F4B155004FFAF48BE866DB5D0D84548C1863B44A9517", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "a8d5599f-f785-4eeb-849d-9d4a92409d77", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "7f8850f8-659f-467d-a090-d689bd7f32b3", "value": "6144:0NYzj2jBoO33tq6qbXaYBc1g5aN9KBBBBBBByygHG/bZbYdNpmIU:eYzAq81g5aN+BoKD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "c66a17ce-29d0-473e-a6ec-8f32b0869cec", "value": 414720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "910309a5-2cd9-4570-ac60-46f882294a16", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d5cae6f-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "dc8e7126-6539-4074-ad47-2bd554e74729", "comment": "Malware payload (AsyncRAT)", "value": "66c8477bcda21e458259146b7563b75c", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "03baf132-9451-4ab7-921e-3e729884f216", "comment": "Malware payload (AsyncRAT)", "value": "019b49d6208392f0ce7d1d166e9e666580a9bb12967f58be5ce5d03afd31ff9d", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "c81799be-b455-4dbd-8caa-aae22a6ecb90", "value": "T1F5735B003BD88926F2AD47BDACF261070EF4C54B6416CE9E3CC454DE5B67BC58A036", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "a0f5499c-69dc-4170-b78d-76f2b6b0f001", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "f4765b82-d6c4-4638-832d-88dc4f92be9f", "value": "1536:aKUUPcx9FbKHoPCdLR33s3qbQSM0ThEPMwS/eqmmRhdWVH1bfbxuowzUobVclN:aKUmcx9FbKHo6dLR33s3qbQSM0NEPMwX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "9f56214f-c221-4bc7-a2b9-8eeb14d26cfe", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "bf255b3d-7690-4e9d-bc1d-349c24867d7f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d65aebd-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "47f76e89-5254-479e-b24f-80877e2fda83", "comment": "Malware payload", "value": "fbd02c032e4f0547d5af380d177440c0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "a64ed369-80e0-4234-b128-5e2f81f0e89e", "comment": "Malware payload", "value": "4e01e7bc7816c8b0f4efbdcfe98444373c6b5c272e5bb8379c867e65273cb2bf", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "4e0c9a5e-e1b7-43a2-aef3-3e6f09806a14", "value": "T1972130064C4B42263676C870CA112248F15AF283F81848E3F13639914E6B64ACFFED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "d115a93a-c273-46cc-a63f-4c088b6c3631", "value": "24:JpzHObI8hpJsyb20BHVmuhe/9u16vpGw1apXO16Ggq8L:JpOI8nhAHlqFwuOBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "f48280ca-55df-42fd-90d1-e9f5c5e6a002", "value": 1199, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "a01ec138-0ab9-4c4b-bca9-f97ce77287ed", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d6b22df-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "1548fe1c-ce6f-4418-a822-c2980d4e94ea", "comment": "Malware payload", "value": "b33928657ad007fff7ace578faef7003", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "b6419201-e95f-4494-812b-b22c696b9197", "comment": "Malware payload", "value": "8562112055dc2db00971733747931789d5ecad535ecd9db1511f80471969fc08", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "a1d2317d-1cfe-4480-b16a-494a30bb119d", "value": "T15B0533BCAC64CED9EEE2843D20B709941D7E67E185C2B753E090436095AF1D2B7F74", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "42f8eca5-1454-48f2-b5d2-1ca05d45ea53", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "3d20a625-9573-406e-8a65-ed5650f885a7", "value": "24576:SWBqAMgCJaopQOfc8KXDh8dTIF2c4oIo6a2Px9:1iQoN0oTI/4oFCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730554, "uuid": "5caad65a-4fcf-4afc-9057-9519b183c2d9", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730554, "uuid": "69c54f45-6df1-4b0d-88db-09292e7522c6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7da23d58-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718730555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "18689fb3-52da-4f74-8275-242aa64e98ac", "comment": "Malware payload (PureLogStealer)", "value": "f11f0ac05ff079702732b3e5d54fde1b", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "b0a1b7e6-087e-443f-b99d-e630441f86f2", "comment": "Malware payload (PureLogStealer)", "value": "116e2bece7a65c8d646ee813fe4b01fe0b5b0b6e9f85e2898306dacac30604a3", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "de2fc88a-2c09-4038-b460-7228a248ea7d", "value": "T14F05231581BA1097FFC010752CA6A3E6663CC66A8CE18314CBD371687E689B57F066", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "f9e768ac-8048-4861-851d-d9b3fd41d55f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "2e6dbbba-d4f5-41c4-9780-fdd30b22fec2", "value": "24576:B0agsYyRWgvQOC1MRQnq9YgDQnt0ueQf9hW91C:BhgsNo9eQnq9YFreQfTM1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730555, "uuid": "6898bfc0-3a69-4c68-811e-aa3a92a0eeb2", "value": 856064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "88cac8a1-cbef-4018-b281-e8b88001b36a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7db71837-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "0664a8e5-b2f9-4c3d-a39f-806e96c10fc8", "comment": "Malware payload", "value": "1220872b5a60851b40457bfa168f34f2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "8dd53170-9354-42fe-acf0-7733d87e1d5b", "comment": "Malware payload", "value": "b74d534d202ae38bd87147dfbb9a39cc1c8782cfcf0df25eba7948cfbeac2ad3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "ca610e1b-17d6-4a8f-9f72-2bcc2f9bee83", "value": "T1FC51C4123DFC2269D521E660B96E6E40B2479ADE701C82B732EC151F6B1570DE1FC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "12d91d94-b882-44c2-9bb6-60085ccb5edb", "value": "48:3hieAOUf1QvS1jdf9lVUUPbYEOH6xQWpiXpJSbJN6J4ZJjsJu883W7:FbgF9lGEbY4piji+qq2W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730555, "uuid": "07b91f3b-0dfe-4c26-b9d2-58394b68e55b", "value": 2472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "951069ee-5f90-4edd-8adb-15cc219bee51", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dd05bd9-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718730555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "79fd0be4-5328-4ccc-8f97-8c81b0723ffb", "comment": "Malware payload (PureLogStealer)", "value": "3fa8ba44b848d959dec2f30e98adefa3", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7ccbf8ba-8c00-4b6d-ae54-133d896474ba", "comment": "Malware payload (PureLogStealer)", "value": "520d5010f513a37e43b3ac3d5436f5baf21272e4c151b6dc34e87b23de72bc5e", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "cd3ed032-5a29-4e05-844e-454cae511b7c", "value": "T11F0533B0F9FA53B1CB484EB3A6D3A219619DBCBFE9B4D427C996193C4F423D103421", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "9cec43fe-cc10-4c25-b241-ed07cd500b03", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "90e32d32-1cb2-4b76-855a-65ad4c58f3fb", "value": "12288:HczqJS1vkI1mfzPhjh55rALUY7GObnjGqwESJs35iObF3uIcO7loMwJmy0bUT1yW:HczQlI1QbU7GGjI+cOZo8y0g+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730555, "uuid": "351b0543-d48c-410e-9043-579812ed26bf", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730555, "uuid": "bddfb620-d0a3-41a9-9dda-bd7faf2065de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e1d2651-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "6eee8de5-ca1b-462f-b8ee-afb203e9522f", "comment": "Malware payload", "value": "e6b58c73ae1b63baaa22df43e8cf925f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "c00608c5-0236-4104-a7bd-7c7719bda55f", "comment": "Malware payload", "value": "92cabc554dec994aa671007571b3fc5022b329119a4f97cd108920ceb8ff14d7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "3624179d-a7e2-4216-83d1-2b0d91848f39", "value": "T15E213D064C4B42263A7AC8708A112248F15AF283F91808E3F13639914E6B64ACFFED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "f3ab49e9-9a00-4f24-91e8-2d36ae092a5f", "value": "24:JpzHObI8hpJsyb20BHVmuhe/9u16vpTw1RpT16Ggq8L:JpOI8nhAHlq2wVBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730556, "uuid": "a84d58cd-ac29-470d-a2b3-6558f3c9b6d8", "value": 1200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "59866c48-47c8-4a61-8df8-bab8510703f8", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e1f3ee1-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1718730556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "114fc824-ea53-4269-91c3-522f05cff17a", "comment": "Malware payload (PhemedroneStealer)", "value": "571878c5dbb5200509fddc36d7c01643", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "76d6b98a-9439-4f47-9c64-a0964a814c28", "comment": "Malware payload (PhemedroneStealer)", "value": "201453afc1cceb1da21a6a87a6921cb99d843ae93be6fd8c2c84d4e6cf025c97", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "d7cf65a9-0d63-4ef9-b10d-2e1ab6cade77", "value": "T181146B5877FC4941E6FF8F787CB452914FB6F8669925EB4E0C9850EC0AB2B848801B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "cd6b3bbf-cbb4-408b-b518-74b4f8a25160", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "324c98ac-bbcf-4ba9-a910-0299c2bf0421", "value": "6144:UsbxzQ/mrGZw/uWJbGF7REKQ1TLRSSXBHDUfp90k:fQ+yZw/CM1/RxXB4fp90k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730556, "uuid": "aa3c7843-794d-412c-a84c-bd61274a2df8", "value": 199272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "4ed05ab9-20f3-4f75-907c-95c3d8132453", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e358659-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PhemedroneStealer)", "timestamp": 1718730556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "259cb8c9-08fe-493f-9e06-86933df76cb2", "comment": "Malware payload (PhemedroneStealer)", "value": "ec974c132c919b5865a24a2c071bb93a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "23680e91-1742-4652-a44a-0382375503d6", "comment": "Malware payload (PhemedroneStealer)", "value": "6572a3bc646832b66c676aa4d607d51020a2dee8ab1d66aff98046c52c9ed9d3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "3cae052e-c735-4f29-8149-a95e64431a79", "value": "T1150419242DEB4916D37BAAB5DFD8B4A5CE65D211920CF3AE4C8A06D24B33F817D430", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "11914e01-4496-44ce-b9aa-3ee3fe158b22", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "417fd3c4-f9ed-4230-bbc4-75bbdd1f8cbf", "value": "3072:ip35iNSuKhNC38S7gzQ/cBD4UA0Z2hvhDingzL3bKJb/5z2N246UhdEK4o1DD:xNUzQ/Usv9ygzKJb33UHEKX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730556, "uuid": "8b17cb11-6b71-4d03-87f9-2e76cb3adfc7", "value": 173056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "bad40867-1adc-4587-a108-11e5e88f2374", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e5e43f2-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718730556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "07c87ade-3643-440a-8282-0e6c38f09e8a", "comment": "Malware payload (PureLogStealer)", "value": "a41dcc178717a13af8972680faa8e697", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "b2016856-6d23-455b-9215-54bf0cbda666", "comment": "Malware payload (PureLogStealer)", "value": "7b8d1f3d477e0a2dfdf4ebe4908e85d4762b8c77cff787801f27580867dc16cd", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "7558f393-fa1f-4ee8-a7c9-f9e112948766", "value": "T18705234860DC619BF8E113F7299248FAB3113DF41AC6F78D2D1E932E12B17C7696C6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "f44dd7a3-8382-4283-aa40-5f1c8c9d5d02", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "48c8237f-ac0a-4cf6-b161-4cc4ea8204a2", "value": "24576:T+e/lcKH8igT+7O1Okjia6AOYP1i7RSzMdND5X:T+e/GcxgT+4ilAOHRD1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730556, "uuid": "e9a9816e-8d54-4a0c-8b4d-f585d32aecf1", "value": 855552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "a68452b1-33fa-4a33-99c4-32597c4aa4ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e7702c7-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "92a4c186-9db8-4ffb-8201-e9271beb5f49", "comment": "Malware payload", "value": "06b81c8edd7f620513a06e3a5cc11483", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "8922588f-6034-456e-a3db-e37f18872638", "comment": "Malware payload", "value": "65082d1a97a4636a529d3a52248ec1eed728fa78c1a3b3e34986e0378b393f1c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "02df228b-e536-406b-83e3-032bc05ed1d3", "value": "T18E05336341660B90EC3B31B91B5CBB85D3B4F45DB278AB7184FD3745D6C2D4C8A2A8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "ee29c816-1d79-4dbb-8bb1-e98f020cf0b2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "f5dc27eb-313c-4c3d-aafc-b893b1b846da", "value": "24576:fI0eDXhXsbQSa0t2xiewR2rpXN/L+9+dClWdD9:AVebQzxieHpXNL+jWdD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730556, "uuid": "5673c2f6-b6ee-411f-9bb9-c7f7e9f3f244", "value": 856064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730556, "uuid": "fdf50d10-aade-4af2-a14a-05e5b2ac2aed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f3a267b-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718730611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730611, "uuid": "8655879c-61b7-41a3-bc45-c3a69798c1e7", "comment": "Malware payload", "value": "a8dd6e82423fcc0dc30b88d5fdce974c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730611, "uuid": "cf6d1851-dae4-44d0-9bb2-326c34f9071b", "comment": "Malware payload", "value": "f5974b1149e0cbca48581f25ee23a85fbff40526f0e496805a15822261e65123", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730611, "uuid": "03309d83-b1be-49ad-bb69-a4614ddf5e51", "value": "T1C651CF217CAC521AD930B5707A1E6E41B287AADFA01C87B731DC151FA60774EE0FC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730611, "uuid": "97ad9498-1e54-4566-9473-86aaaf37c645", "value": "48:3hiEUf18Gjdf9lVUUPtzvRWZFW5zvRnFDzvRwFqzvROnFOCOH6xfXK2piXpJSbJN:eF9lGERvRWZFW1vRnFnvRwFOvROnFOER", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730611, "uuid": "6dc7dc71-56ce-40c7-a8a5-b18333f7ba07", "value": 3045, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730611, "uuid": "d7cbc013-dd9b-473d-bfa9-ec409dd62bba", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcc11317-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1718730768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730768, "uuid": "edcad3fb-c84e-4162-ae7f-4b78baf1dc0d", "comment": "Malware payload (LummaStealer)", "value": "5a51cd924898e6654a9a013e50b918ae", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730768, "uuid": "0f992ae4-24c8-4d98-b80a-1b5cb1dac18b", "comment": "Malware payload (LummaStealer)", "value": "31e10d38db3a55aa6150374a332b0d942e1ea211c63ce65fb871a45ac663f8b9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730768, "uuid": "9bcea427-b984-4e9a-b2da-044804213acb", "value": "T1C9A47C5262F3AE11FEF647324A39C2A4262FBD215E76524E31743A3F39732A185537", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730768, "uuid": "cbd9d148-7d70-4692-87aa-e59bec89668a", "value": "eb4559a6ab13ae48fed5742731d48fd2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730768, "uuid": "61e5bd06-d7e3-4b45-b392-b3be1dba5645", "value": "6144:GLcRIVEdWp9n+rr5fMhahU1OBB8633MWb6SlEWD2z4bcNF25Az:GlVBp9OrQQkRy3P6GD2z4bkz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730768, "uuid": "b7513a52-1a7c-4d98-84d3-eb9af3e27296", "value": 453120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730768, "uuid": "1b3fc5be-b123-4404-912f-599d15c86316", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08ad3733-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1718730788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730788, "uuid": "e50ca348-9945-48fd-bd9f-25b5d474a5a8", "comment": "Malware payload (AsyncRAT)", "value": "11275303053fc8928e0826678b87f2ee", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730788, "uuid": "6ce349bf-e2d6-46ee-9096-ae4162eed06f", "comment": "Malware payload (AsyncRAT)", "value": "617f286803fcd3e71af05ae6144b809896d28f8b9640ac65055b950bb82fac1e", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730788, "uuid": "5a50e112-e644-4413-a98d-91874e6d9879", "value": "T1CFA5238385BBEB547031C1EA1D1DB530570F228FEC26BAC656B2E3E32772067199DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730788, "uuid": "4c324ecd-a180-4544-9a4e-626e1e0d97f9", "value": "49152:uawIx3e50mRIfcqur0SxG9GO6juMRUPi+qfNb6QcgBFAzvk/n/+lD+:uvII+6GSxG9GO6juMRGibZ6ngPAgWD+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718730788, "uuid": "70953a4d-2d53-4cb1-a0e5-1dd685298842", "value": 2140369, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730788, "uuid": "8fe43441-d915-4aab-a331-30bf709dfcc5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3349fc9b-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718733007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733007, "uuid": "ae02c33a-21c0-461d-8b71-0ef060ef363f", "comment": "Malware payload", "value": "212dc011cd3750bc6aebcc77a559bd2e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733007, "uuid": "3ad8c193-6ed5-452a-b5ba-3b0464937ff0", "comment": "Malware payload", "value": "8aa91963d4b704c11ae00a6ec70584a2ab0432432216d00be4f05197d9f6a0c2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733007, "uuid": "77c604c2-7ddf-48c9-9a28-9fa0a527a6c5", "value": "T12B412EA93D63950F778059080024D48663F4725C957C7F48BB59C3D109F1753DB15A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733007, "uuid": "f09aa807-4709-4868-8817-c1063fd49139", "value": "48:unk78PlRjZxviPdryBBJxDJ9LA1YXsKzJxJ:4lR/aPdryBBHA1YX7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718733007, "uuid": "faba1768-c4fa-4174-bf10-d2d7399ddd22", "value": 1958, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733007, "uuid": "78219b0b-f19f-4275-8378-e56c9b3c9525", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35f931a5-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1718733012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733012, "uuid": "d60c1d26-990a-41ab-87de-b6c9aabb1162", "comment": "Malware payload (PureLogStealer)", "value": "47069f002e03da24cb2ef04c19cce8f9", "object_relation": "md5", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733012, "uuid": "d3f69613-4359-4327-8b73-145176205252", "comment": "Malware payload (PureLogStealer)", "value": "0581ff6cecc21644f9b5d85823362fe60f0c4b757664b7bfafcc9e2e158690d3", "object_relation": "sha256", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733012, "uuid": "f86db9dc-1c6d-45fe-afb0-3692b0cd5e08", "value": "T1D7C5AD01E3A805A4D87BD734CA558333D670B9929732E54F0A9CD6462F73AA29F7F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733012, "uuid": "f8656857-6e95-48f9-aee2-855409a9dded", "value": "340d65ede751260b3cc3042ec139606a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733012, "uuid": "a42db4ea-cac5-48c4-847e-4dc1cbb032e8", "value": "49152:SgpOmgDQ06m3N051GXdJCXw5Y9ehswM1A8Lfwosta:MDDe4RhfHta", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718733012, "uuid": "0b422f36-f80c-45f1-a768-cd9daad28323", "value": 2714336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733012, "uuid": "8d0ac53f-a6a0-4c69-893c-ba6cabc8e13b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "528f8f87-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718734036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734036, "uuid": "310e14f7-a1d3-4633-9db0-aebdcbab0c84", "comment": "Malware payload (RiseProStealer)", "value": "785788a206c1f8e3b11faa68e82212cd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734036, "uuid": "e6cd6283-411e-4a30-a48d-29355f3bd4bd", "comment": "Malware payload (RiseProStealer)", "value": "bf446ce8f5f55f4bff7ca900ed8d8c303b86e089f281fca6097ee37ab484b408", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734036, "uuid": "49386501-78e8-40a6-9d2f-aebd560d0aec", "value": "T1F95533763DF68F52C367B8FC2AAE06314BBCFEA2641DD84A032B11CE55650EE47919", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734036, "uuid": "f0fe89b3-46e4-4731-8aac-1c22cf903f74", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734036, "uuid": "8e58a126-cf5f-48b2-9a1b-12f7e8971e97", "value": "24576:XKNfMJgqKSghWf3dSk6RPE0rF5lgZhwQc6icoEC+h+NrUS34rf:X/gW/dSk63flQhlDoEigS3Gf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734036, "uuid": "925fb68e-9c46-46f0-8ad9-eca6489254a4", "value": 1324544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734036, "uuid": "c9c09f45-7053-43d4-a121-2ffb104ccbaf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "552b79a1-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718733064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733064, "uuid": "946c163d-7a1f-4ac1-9ec1-7db718a2c2bf", "comment": "Malware payload (RiseProStealer)", "value": "e069acc2e53699d80cf621efdf7810df", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733064, "uuid": "dc180281-6eea-45c5-9eb8-3a7c1e4e4cd6", "comment": "Malware payload (RiseProStealer)", "value": "1de793d99153b18f8f0a52ecaffc7d59adf6ca4b44fe0eb63c5cc5fea8ef96ac", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733064, "uuid": "bb962ba5-63f1-4c80-bfef-b126f64840f8", "value": "T1175533F9C7BB1655F21ACBB091CD229BEA0C7D293091EB29520F85D90C2159F6FA3C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733064, "uuid": "4fa7ce08-7d77-44e5-a822-609fc5f02b92", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733064, "uuid": "d6a08db7-137f-4afb-8bee-10c6d154b869", "value": "24576:5P1IzSSvUL2BFuunRbO4Pq2pH9d17tWfwQNz+8CbQeVdBkpro/M:5PGzJvfuKnpdv78flNybQgBkBoU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718733064, "uuid": "828cb21f-b3bd-4f26-a568-155aeddc8a04", "value": 1326080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733064, "uuid": "f55b866e-d5cb-489b-97d2-77e2c877b8e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "634720b1-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718733489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733489, "uuid": "e88b04d9-4683-4d1d-bc47-bcd9e116419f", "comment": "Malware payload", "value": "8a09355eb9f636c1869460a0e0382e32", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733489, "uuid": "1b416f66-c79b-4053-a347-2ac96e1ad693", "comment": "Malware payload", "value": "32bc46586f467d358beccbe851c0f9d360b5c7a1f689da1e9a0ee24aa1471023", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733489, "uuid": "1c73f250-e18f-4272-bcd8-2c9acc55a533", "value": "T1D645BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733489, "uuid": "a91fecfe-9c6e-44de-b866-8abb5ebeb448", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733489, "uuid": "ade8141b-14ee-46b7-91b2-cfed3640d47e", "value": "24576:4qDEvCTbMWu7rQYlBQcBiT6rprG8au+2+b+HdiJUX:4TvC/MTQYxsWR7au+2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718733489, "uuid": "1732c2b2-c0ef-4042-b3a2-9844aab9bb82", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733489, "uuid": "92d1d330-5213-4fa8-bebb-4a306128f1ea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5ecada7-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718734246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734246, "uuid": "5ef87514-619d-4352-b4e2-d50bdaf428e0", "comment": "Malware payload (Amadey)", "value": "6d39a142f5a250b69e322386c1b7cf99", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734246, "uuid": "7276d470-8551-4a5b-b57c-3370261f302c", "comment": "Malware payload (Amadey)", "value": "cb6122213cb6d15637271ed600e1d48257d6e4d7822ad90d1080160db90779c2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734246, "uuid": "bbcf9ce0-8f2e-4508-aa5a-d877a992a574", "value": "T137953350ABFBB925D0DE477725B3476963F9D6902089213C60338339DD37AEB18A36", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734246, "uuid": "d5d122df-ac14-4556-834b-2a973a1ae549", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734246, "uuid": "8ff0664b-7a7a-4bc4-8d5a-952bc9f945a9", "value": "49152:gA+9M39e2hSfrzi5KGF9a4hq59uxRStV7oQ2:gP9a7ArzYKeVRS7kQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734246, "uuid": "9d9f72f5-878d-44f9-9a7e-9f20d3738538", "value": 1915904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734246, "uuid": "24675528-9228-4c29-9dbc-15dcfa26b878", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81f2a4eb-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718733569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733569, "uuid": "7ff1faf7-158b-4131-92d9-ef59e395727a", "comment": "Malware payload (Amadey)", "value": "153b1fdfd87ac13ac7499056f9919121", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733569, "uuid": "82f0ef40-64bc-4103-9096-07897b17572d", "comment": "Malware payload (Amadey)", "value": "58ff61b071fde8ed7380be8a2959c3362058c101e59056516199f6150cc1bf1b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733569, "uuid": "6004cf09-f7f6-4c70-ad83-0444487d4e9c", "value": "T1C795333F7B465B36CCBD4FF5C4DB271ABE76B590246AAA751B07F8014282319247AC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733569, "uuid": "70eb37a0-3f10-4fcb-bf54-94a58a6fa528", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733569, "uuid": "319b62eb-9b7e-446a-8e28-ea4711a34c5a", "value": "49152:ZwGKNtS6VjNQbGqdjbs5iT45E33uMWz5yBf46fd:0G6VZQbGqtki/3/YA946l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718733569, "uuid": "7112c00d-7aa5-454f-a37d-39e1c789b25d", "value": 1906688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733569, "uuid": "a1b60512-465b-44c0-8daa-de2c759a67d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe206eee-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718733777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733777, "uuid": "43d5d5a7-f8dc-4bbf-b3b2-1089b6816116", "comment": "Malware payload", "value": "ec68d24ae43a2bab02a0ba5cff421444", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733777, "uuid": "338b4540-32f2-48eb-93e2-576d1f58995b", "comment": "Malware payload", "value": "3d4f47c27a76b8ee13abaa457d49db56f3a99a65ec7e7029b5d07c152fa09143", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733777, "uuid": "93e272c1-26d8-4bf0-9b97-3aea3b667cc5", "value": "T193159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733777, "uuid": "579eca8b-dbca-4530-9f33-3b52e6401031", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733777, "uuid": "fa52c9a7-dec5-4696-824e-3c3d8a78de09", "value": "12288:3qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TN:3qDEvCTbMWu7rQYlBQcBiT6rprG8aAN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718733777, "uuid": "108b72ef-eed3-48e4-b531-b49dfa81f7f2", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733777, "uuid": "36ffaace-7df9-4192-8e24-b0628b0ab43c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd1467c1-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718734151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734151, "uuid": "ecffb68d-c7d7-406e-aed8-dff6f35a7321", "comment": "Malware payload", "value": "e01e885759d9b34958ecd0fc2b5395ea", "object_relation": "md5", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734151, "uuid": "1e290cf8-2bfc-40e9-bbe8-5ad934e3c0a1", "comment": "Malware payload", "value": "0be3c4eaeea797319c4733b517f22bc220ef588e3f295e99704c33ff31e6b3ec", "object_relation": "sha256", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734151, "uuid": "3a458eb2-e0f9-412f-8750-4c95772fab1a", "value": "T114262253E7DD956EECF383368B76092655039E628743E7438DA0723D09BB9C04E99B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734151, "uuid": "f8f20ffe-2f82-4373-b1ef-990dece73c8c", "value": "98304:ok6RLaNytuAPAWK+zOa7Mv/hyvpxWV2aVmGj298300k:ok65aNSuNWK+zc/hyve8hl0k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734151, "uuid": "5bccd088-0466-45e1-a06e-bade21f3a6c3", "value": 4847806, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734151, "uuid": "86a35a10-3935-4988-a213-e48fa0bb66c6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02229a2a-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718734213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734213, "uuid": "014ca532-e52f-4f8e-98b8-41daa28830db", "comment": "Malware payload", "value": "73f51dbc7cee54e5a9aadf1c096d8115", "object_relation": "md5", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734213, "uuid": "ae508818-3b0c-48dd-bd77-2c814573079a", "comment": "Malware payload", "value": "568024dd9cd5abbe878e52dd5371b4820dcfade27ff06e17be1babf073785258", "object_relation": "sha256", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734213, "uuid": "6f49d18a-9b22-4565-a4b5-cda8d00c108e", "value": "T16CC51282F7EA5D3ECEB3813A4FAA463513129E27C157E7079894362C68376C44F99B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734213, "uuid": "6b4bd334-b864-4f21-91b7-5e71c97afbed", "value": "49152:xZ3o2pnRJnhnzq0t+bmjQKV4WeRJSnvlV25UExwlTB0c7O6Z54mE4HNp8be/Dg/h:x+WnTnBzq0tDQExiiTGw9vxtp8bIm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734213, "uuid": "37fc66e2-512a-47b5-952b-99187025dac1", "value": 2623391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734213, "uuid": "288b8357-0ac6-41a1-b8eb-55d07d8fa0f1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "023f9d4b-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718734213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734213, "uuid": "e7eb195f-78f5-48f2-8cf3-24aef5066c05", "comment": "Malware payload", "value": "daa77581c8d4fa912863370e15b9a745", "object_relation": "md5", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734213, "uuid": "19d9dcbd-898f-4a7d-8e9e-cd48b069e8bb", "comment": "Malware payload", "value": "263fcbc64a9e6e15fa3d0f138bc85d98845faa855ac2ac689fb0fbc42840b9ce", "object_relation": "sha256", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734213, "uuid": "adf7b7fe-b4b6-4c05-8078-ae631a3786ef", "value": "T1BA262342F7C8A46EECF38B3A4777092652028E6A8753E3934D64B13C1DF75C09E99A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734213, "uuid": "cc45e9b2-c073-46d9-bb33-e069c11b8a79", "value": "98304:KniLrShWV/3OeiBuD4+EwH2xcSt5wn8xq6HOKxyW4U9P:KnqrQe/3OD+EYst5wgJuKUs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734213, "uuid": "6de8a343-0df1-40d5-a8a4-11e63cc43590", "value": 4831503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734213, "uuid": "ef9cf773-eba3-4cc1-9334-d00544c640cc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0264ce5c-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718734214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734214, "uuid": "4dbb556f-3238-4482-b220-b6c2a97b4d49", "comment": "Malware payload", "value": "e1436fe10b569b80654d9574777fea4f", "object_relation": "md5", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734214, "uuid": "5756160d-4800-42a2-bccc-a5999312e40b", "comment": "Malware payload", "value": "329d1f03c5e00adc45f99f2fb88c8f94a3033688b39a8fbd80fa0644f845a088", "object_relation": "sha256", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734214, "uuid": "92e934b5-0c96-4195-b56e-50ad11e931fb", "value": "T169C51291F7F66C2EDCB381364FAA423562529E57C1A7E7078894362D6C3B2C40F99B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734214, "uuid": "cb679a91-13da-4918-9e36-301b4583ff75", "value": "49152:e4xgYnm9ua3CqKxv6CHtmgqFSjuLMeRGe+xmoG0PdfNg/HZ:e4xgYm9ua3CqKxvVqFSjuXr+6SdsZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734214, "uuid": "f6499779-4dc9-45a6-b233-2e9a0544939e", "value": 2613679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734214, "uuid": "db7e9bcd-b992-4bda-b147-9013f971b3b8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "234510e9-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Hook)", "timestamp": 1718734269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734269, "uuid": "bd2cc52b-7ee0-4ff2-bf6d-cfefff95a1f7", "comment": "Malware payload (Hook)", "value": "c0b49d35aba26433370836dacc9d3007", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "hookbot", "colour": "#c20dbd", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734269, "uuid": "25993e7f-d7cb-4eb6-8a60-2ab2f51e7a61", "comment": "Malware payload (Hook)", "value": "ef9c1ee9c06e8f6f92e9388e445d268072a321a4bf77704054dfdfbc68bd8830", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "hookbot", "colour": "#c20dbd", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734269, "uuid": "6f864dc2-20b2-426b-8d88-b17d8c2765a4", "value": "T12AD51281FBE92D2FCCB784364F9B863612568E13C686D7078894772D687B2D40F99B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734269, "uuid": "b6eabe75-df94-4eff-a8fc-0db9c71d98cd", "value": "49152:R7gmZbnXsxJHCXVvEELV0AUgFw9EdFMVDvRXleFSl2Fu0cFUm4LpisVaQ/jazg/Z:FpbXsxNCXBEELrUgFw991VIYyuV6m4oo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734269, "uuid": "fa3758cf-22bd-4e93-89f1-31c84b36d66a", "value": 2934135, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734269, "uuid": "a705c1c7-ef99-40e5-9d37-8024c34e95a6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b9bf54e-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Hook)", "timestamp": 1718734390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734390, "uuid": "c75ff5a1-aeb6-4387-97fa-a0886840a41d", "comment": "Malware payload (Hook)", "value": "2a3e8d148a007a1c945030c3d7ebdd99", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734390, "uuid": "3305ae84-f68b-4f87-bca7-9fb879022e31", "comment": "Malware payload (Hook)", "value": "3d287d481cbc7233cd2aa7d56738c6bbb082a5f505c04b79ef147a7e8187de9d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734390, "uuid": "f60c783f-a7cb-4b5d-9c15-54e360aa9059", "value": "T1A035D082F7EA5D2FCCB784360FAA473512629E5AC697D70788A4363D68376C40F49B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734390, "uuid": "4674c377-670b-446f-979b-d3358a0248e9", "value": "24576:SlaAQUvgkaA1Nngr6zIaAo2N1yKVoPzuoSyEDig/H9Nf:SlaArge1G2kaAosEym+ig/jf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734390, "uuid": "78f925cf-ee0d-433d-a0f5-7bd7b8173dad", "value": 1152529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734390, "uuid": "f94dda90-d21d-4793-bd52-2c6fdee18520", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ba36a87-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Hook)", "timestamp": 1718734390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734390, "uuid": "c1db3b0c-b901-4f32-831a-9278be0460be", "comment": "Malware payload (Hook)", "value": "0d0c23a96dc90d431a8ce01f0cee1575", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734390, "uuid": "ec67b3aa-419b-4cb4-af17-c034a07f5e5d", "comment": "Malware payload (Hook)", "value": "aea84ebd9c1194efa69033231fe055a9fa79f3e740825965ab2767c4f61b0531", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734390, "uuid": "e0235647-5b02-4c4f-a6f8-96a5c0c5a8a5", "value": "T1ADD51281F7EA0C2FCDB7843A1F9B873516169E56C682D70798A8363D683B2D40F59B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734390, "uuid": "232996d3-93d7-4363-8606-0745dd88602d", "value": "49152:mAT2grdSkQvKiMqFnr8CJMtvlB0l1EIFWEog1cJXCDG9XU3g/KZ:mAT2g5TQSSlrxmdva1EUag1cX8eXKZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718734390, "uuid": "232137f0-9d5e-4751-8723-394a3db763a4", "value": 2954695, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734390, "uuid": "9289914a-e9b6-4217-be27-66b9cc3ac01e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5de4ab2d-2da0-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718735226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735226, "uuid": "c5790539-ad64-4b56-a4e8-c4997780b822", "comment": "Malware payload (Mirai)", "value": "296239d17448db764211396377155038", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735226, "uuid": "490d4f65-4932-407d-a5fd-76c3bacedaef", "comment": "Malware payload (Mirai)", "value": "c098478a55b62ced43faf5df521b51cd3461fb46aebc071f574b0684f66dd13a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735226, "uuid": "a5c1277b-4579-4a71-94ed-46f2a7f20dda", "value": "T18C430713158580BCCD49C2345E7FE527EA23F47D023AFA0A77A0BD226E4BD215EDE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735226, "uuid": "2ea503d8-41c7-4e6d-8a91-a3b311d743b6", "value": "1536:LR3VhdFZ7VV8xWtuA1XJMqt4TpsLLHws:LR3TfV8xWr9t4VWQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718735226, "uuid": "d9bb1128-23f6-4082-a522-cc21a5907694", "value": 59408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735226, "uuid": "9d901770-9e11-4eb9-bf83-c1d24a89a837", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735226, "uuid": "911b1d8c-5347-4a9e-8542-4bb7614cf886", "value": "t1ce2103b939265ae5f2fbfa276742d8254d902a2040e035e3c17175ffeb5834109758", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b86456-2da2-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718736041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736041, "uuid": "633adf11-d2ae-4135-a8de-48bc7b02d6c0", "comment": "Malware payload (Amadey)", "value": "1bd87b4dc3556578e6c21bed01659bda", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736041, "uuid": "e5f52fbb-f1ee-42d0-bcfa-410d94c6c56f", "comment": "Malware payload (Amadey)", "value": "40afcb67044d0be0bb2ac42ca5d5520eb623ee80d016ae56a01740084087220f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736041, "uuid": "e96ddafe-d82e-4eda-9ba4-f43c4f0cf3a4", "value": "T1BAB47C92A2F3AE11EEF7C7329A39C1B4262BBD215E76514D3274371F29732A385117", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736041, "uuid": "caf20243-e684-4a4d-a752-660397461b2e", "value": "eb4559a6ab13ae48fed5742731d48fd2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736041, "uuid": "8e2c3f97-9d62-401b-914a-2141a81d9b45", "value": "6144:RLPROOFYfZIQUNb3s3TESMhZXIjO/9ss0FoDp6fYUqB6/fN7uN4RoNF5Az:RYOiRI/8Q3v0FOpKu63Nc42Ny", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718736041, "uuid": "6e1030a2-b2ff-4a08-84f8-2a40a7a288dd", "value": 497152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736041, "uuid": "d0bdefd0-25a4-4277-8397-f157407a4dc9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0657bc22-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718736368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736368, "uuid": "f51ed29c-7407-4c72-ae69-e1f4035ffa78", "comment": "Malware payload", "value": "08e1b3cf4f64cde029730f412597583f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736368, "uuid": "41d09020-3ecc-4a12-9c4d-9e87dcfe0abe", "comment": "Malware payload", "value": "a719a79f7321fa3a7bc282aa67e1502e13a9225776defdf3c392df66275c08fd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736368, "uuid": "e1c0ee15-5e95-42ee-bba3-62fde6a75cb9", "value": "T166E56C8B75DBA079F7AAA06396E67BECCDF1D955E442140A4D402C0F7AC84BFE3981", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736368, "uuid": "78de35ed-dce3-40da-8ebc-0f3fa4ed9c95", "value": "49152:6kED9KUU5eQJT3uHxVuey/JbDasUDchBeqGhra:6kcKUU5fJT3uHxVBy1arch4NG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718736368, "uuid": "440b85de-eba9-4d60-bc7c-d6e34a4f6825", "value": 3150644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736368, "uuid": "6c91577c-1182-4715-8bb9-83d12904a430", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ef3af9-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718736659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736659, "uuid": "a89739c9-297e-4c7d-a896-02555187e3a5", "comment": "Malware payload", "value": "221b3adee6b260f728e3adf229a7620c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736659, "uuid": "379172ca-c2ce-4dcf-91f4-cbd7750d4634", "comment": "Malware payload", "value": "96db9d1595a1e05ba9e43825505697bbee8a5147c89c1d7465435959adbda6b3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736659, "uuid": "995b0181-9a07-41be-980f-4bdf2f836b10", "value": "T1DD035D206691D033C842A4B1922993F19F7F59322569F8C7BB556F311FB17E0B72E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736659, "uuid": "1be7a0ba-a447-4711-b34f-d9e87059ec5f", "value": "768:gMAH8to6sOHPg8bdCsZku2WnLhGeqo0FqR7YoyPevcx:ghr9IbLBLwS0FqRMomevA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718736659, "uuid": "c2021ecb-265a-407e-9db5-22a26a54d6e0", "value": 39208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736659, "uuid": "321bdea8-cd0f-468e-8dd5-2e81e10ab32d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdfc3a78-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718736703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736703, "uuid": "f4c29c05-ba35-489a-abd2-f834ea9cf9ba", "comment": "Malware payload (RiseProStealer)", "value": "c1cb50e0a9b7d8c78fc68e28de032402", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736703, "uuid": "40e98843-e0be-4f3c-baf3-616d5bedc2c6", "comment": "Malware payload (RiseProStealer)", "value": "8832a0cb2173894f538ee8cd8de6943c84d1e591a92b4cf2233d66514b0ca6c0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736703, "uuid": "d11ec6d6-e943-4f92-aa84-2b472a9f3081", "value": "T135553378A2A73F00D539D5BAC8CAA2229D6CF91D0749CE556C1F99410C363EF1B27F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736703, "uuid": "c3dfe357-7670-440d-921e-443f4d126720", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736703, "uuid": "0113e65b-36a9-421d-96f3-8dcf83fa3893", "value": "24576:mjCKpOoILo/BmNpHV3COw8LwQYN2K3yWds0JkKyVagDoIl9UAmPn8MBP1XQT+:aVpjL/U9COJLl9adsLUgDpjLKxBCT+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718736703, "uuid": "dcb7dba9-55f1-427b-9979-a14d86338ef0", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736703, "uuid": "7cf46439-68a3-44b7-a304-48b406406cca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "409dc6d6-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718737353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737353, "uuid": "3cfc3c0f-c02a-4c96-9317-142700c4bd40", "comment": "Malware payload (RiseProStealer)", "value": "83f56bc359c63d62faa026149f13a87f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737353, "uuid": "90cf1e3f-3b8b-4cd0-a8c6-e14ed1ab2a6a", "comment": "Malware payload (RiseProStealer)", "value": "63232ce7fb9f09d761ebf4993f0fbe78b6f1ea4d3abebdcbfaa7e3dc358f075a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737353, "uuid": "43217d9e-adbc-44ba-9908-00584449bdbf", "value": "T1315533DC61FE40A4D32DBAF0927941988D1E39AD53593D91395FC6021FB526E3BAF0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737353, "uuid": "6073e187-5a1b-427f-adfc-6b1c6d879ac3", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737353, "uuid": "65a8f622-22cf-4e07-962c-fa74711c4253", "value": "24576:Q8NEwQpKC2Ot+IrQrDn2RPQ2yZx0/EXpwQMz+8dy6RnQ3v0lq2o9F:mpKxe+aW2fy9plMgUQcq2UF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718737353, "uuid": "c3e8dacb-6a03-484c-8491-16d8d08af7a4", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737353, "uuid": "7e98e2bb-486c-4772-bdc6-076b0b940525", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3e47ec-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718737184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737184, "uuid": "1d282c43-c0c2-4756-8008-72f32e47da8b", "comment": "Malware payload (Amadey)", "value": "88bf37ae95bdc63bea587bddb1f55196", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737184, "uuid": "e2f526ea-5522-40a2-950c-c1303abf47c1", "comment": "Malware payload (Amadey)", "value": "fa512d445a0a43203c16e2f5606637240dd15cd7f749a577109a16db97df14b2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737184, "uuid": "026743c3-1ea4-4483-9659-5ff8c02457cc", "value": "T16A9533AE798FC576D48D2337EEEFD701BAB410C5B2A215297B4E4B10006DFC52A9E4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737184, "uuid": "9e1c6128-027a-465d-a48f-30cc26383555", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737184, "uuid": "d1f73745-5a4d-4a89-a3ec-f49cf5cba0cb", "value": "49152:+FPtqpihrC9pjDKMLII6sMTY1hNhytmS3VL:+FVqpihUjuMLOcAxx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718737184, "uuid": "42a4386f-53ff-4900-953b-4548a06ec8e0", "value": 1916416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737184, "uuid": "0a58c9bb-9b7a-44e1-b12e-29e6231152cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79da5b84-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718737420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737420, "uuid": "6a1ee96b-99a8-461c-a5fd-941d441439ef", "comment": "Malware payload", "value": "06ef8e5301e5ff0af950230f10f35998", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737420, "uuid": "f47f8a7e-8689-466f-a8f6-4c4edba697a9", "comment": "Malware payload", "value": "9abe434803a31bc40ef6ac4c9a8e9be39e58e9af0fe8bb19e6f19f2e87df3821", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737420, "uuid": "db356ac2-2507-478c-891d-f8cfa1e6bd28", "value": "T17145BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737420, "uuid": "e5df510e-d33f-4664-a578-815005224b90", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737420, "uuid": "3ef0ade4-c396-4b17-bfe7-8257c7d753b6", "value": "24576:SqDEvCTbMWu7rQYlBQcBiT6rprG8auV2+b+HdiJUX:STvC/MTQYxsWR7auV2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718737420, "uuid": "2e317c27-6062-4940-ab23-a5df92613935", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737420, "uuid": "4ff4137f-af4d-499c-852c-1a639ea89a6e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d64f595f-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718737576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737576, "uuid": "34f224de-88c4-42df-a9f2-d3d3b2dbb6ce", "comment": "Malware payload (Amadey)", "value": "eb7dac6ba197764d19e966085704f768", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737576, "uuid": "e7f1fc88-9e9d-4718-bb11-66fe8e0c58b7", "comment": "Malware payload (Amadey)", "value": "4056b8c0458dbf97491f33340f1435b81d57dcb7933a00691afc645376e8b098", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737576, "uuid": "540de061-8f80-46d7-82bc-16fd8fe2fa77", "value": "T1B39533A72F675ED4CDAA137AE4B44F583E81D7E004D691E6338FC290DA6636E26C1D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737576, "uuid": "b554d2bd-9f79-4e84-b9e3-502b4201691e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737576, "uuid": "8c93fe21-24c4-4fb7-aa22-277da48efff4", "value": "24576:DN9TuP1Xwmp4tDh9jdfAZm00CFX3WJo8vilD8rwkBTVI/g7CpYq06epULshaC9l3:rTuPymp4th9WmYwPdZuPZYpUQhaWws", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718737576, "uuid": "dd1126b3-e874-485d-85e7-6b19601707eb", "value": 1904128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737576, "uuid": "b784b5d6-834c-492d-ad41-0ff4c62d29e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ea796f2-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718740918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740918, "uuid": "954692f8-3e82-4174-a25f-60caedd05fdd", "comment": "Malware payload", "value": "badbbc2a37eb7b293680e7071e983e0f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740918, "uuid": "bc6a4d2d-fcae-4f7e-bbc0-3c711854e7df", "comment": "Malware payload", "value": "cf361f8a413d246fba7563df723f3a1846700da13f068d2b72f71b9bd63b6fc8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740918, "uuid": "ba378ade-20da-41bc-bae1-4ab97fcee02e", "value": "T1BD159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740918, "uuid": "e7a14f08-0390-4d5e-ac73-ef60789285e5", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740918, "uuid": "c76f570a-f3cf-46e4-ae9f-78ea07beea1e", "value": "12288:HqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tx:HqDEvCTbMWu7rQYlBQcBiT6rprG8aAx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718740918, "uuid": "6842c2be-08a4-40e6-9432-b3fd32bebf8b", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740918, "uuid": "3552463f-0084-4cd5-9784-c43ec36df3a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa298f38-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718740937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740937, "uuid": "ba04a719-042c-466f-829b-6c8097ffef40", "comment": "Malware payload", "value": "95bfbbd34a0f1a6c668f4336be9c1482", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740937, "uuid": "f0023659-c710-4808-9b26-f199762ff52e", "comment": "Malware payload", "value": "95625cb70a539b1d5e94f4e554de06f44c8ff580c6606fa3ccc14bd8feb9fe4a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740937, "uuid": "bdcba684-b223-4460-a626-7ce1e2d971ad", "value": "T1A345BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740937, "uuid": "ee438b66-a218-4b94-adbe-ad8fafcd66a2", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740937, "uuid": "8770fd96-ef6c-4622-b2b0-739325c3ad93", "value": "24576:ZqDEvCTbMWu7rQYlBQcBiT6rprG8auH2+b+HdiJUX:ZTvC/MTQYxsWR7auH2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718740937, "uuid": "edc99e6c-b451-4060-8f50-407604078c65", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740937, "uuid": "c1f2b708-f762-4ffd-838d-f6f9366c457f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8ad7824-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718740989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740989, "uuid": "143db766-6af5-456b-b087-26b28b527097", "comment": "Malware payload (RiseProStealer)", "value": "90e83c78a685a13ea3552923730ae86b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740989, "uuid": "31e22ddd-295c-47f5-ad72-ba0ad6099a68", "comment": "Malware payload (RiseProStealer)", "value": "18cf7ecc99b9389d1602632823dadc41b0b16070562e688b63b759fb68c31aec", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740989, "uuid": "fae963c3-40b1-46cc-8550-3eb465917684", "value": "T17655337CA3375607C235F6F493CB862069A8B9AEC411132780D739905E7B8EF2B565", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740989, "uuid": "e2233bbf-e45b-48a2-9b0f-572e025d9de6", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740989, "uuid": "1a088a33-949c-42c1-a837-6a8689a0cc8f", "value": "24576:4X7w3ybMv2yYQXa6b0TU++bKwQX0iyIakELumcN29F/uZf:e7wi4+OqqR+oKlVL8vcOhu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718740989, "uuid": "c3c6ebf4-1879-46f6-9dd9-b3e50ae9cd25", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740989, "uuid": "d4b02b81-f5fc-47e5-a837-cf98a32096e6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd46dd48-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718741077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741077, "uuid": "594a4a28-6033-4ac0-9382-ffceb9011bf1", "comment": "Malware payload", "value": "66e4978a93ce829acfcce5e72c70fd3a", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741077, "uuid": "240f5531-4dba-4d00-922f-b1d859920726", "comment": "Malware payload", "value": "a869ba1c786dea51f085cea6188cd13c74fda5f1847ed8469ed05f30ac11a918", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741077, "uuid": "d3103f61-1c02-4bc3-a232-3c2aa5e975da", "value": "T1686302811F733BA6EF388A7E47DAED9D6F3D107862C04AD592493199ED720630116F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741077, "uuid": "c0356388-215e-4dc4-97a2-f0b99a5f4376", "value": "1536:Q3YijaVensHmL2YrGl9n30e2HdmHttPmhWvaOEnlCAY1nXvyRzG:JijaVmsGrCn30e2H0tPmcva67XKw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741077, "uuid": "9ea360ee-d466-4573-af2f-9b954192f8bb", "value": 71544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741077, "uuid": "c126bf07-386b-47ae-8e67-7a56e5ba5f27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1a1ea57-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718741489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741489, "uuid": "d22626ed-6f9c-40e8-a551-2dbb7aee1040", "comment": "Malware payload (Amadey)", "value": "f3cc40a725055203c0d57b9b51400bad", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741489, "uuid": "702ae0cc-387b-4a2a-86a8-dea5f9e67765", "comment": "Malware payload (Amadey)", "value": "4ac557937ca4659478dd224cb6b2e72c35ef0620d4be5148b7bef20c4c0991e5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741489, "uuid": "35e2d70f-f6c2-42c5-98a4-329e09fd1ee1", "value": "T1C4B49D12B2E16821EEB78B315E39C6A4E7AFBC625F74628D3158FE1F09731A1C5527", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741489, "uuid": "c02636ca-d3ed-4c3c-a0d9-e5a517725167", "value": "d907ab8b4c80da62113a3e93881cf4a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741489, "uuid": "199150d5-ac23-490d-8bac-ac2a872e652a", "value": "6144:cLWRh8o0PPIXHiCHvgy5jOF7mlSArkidJZbmw3hPUhTkuPzYMb:c+8hHmCI/IolDrkgJ5mW8hBPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741489, "uuid": "e8b94916-d1dc-490a-924c-7f068691918b", "value": 504320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741489, "uuid": "e11939c3-04e3-4206-a125-a785784040e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38c47546-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718741606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741606, "uuid": "76f4797e-f447-42bc-a0ae-ae73e2c59064", "comment": "Malware payload (RiseProStealer)", "value": "7e70f9c8759bd8f82a3d93c9773b433b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741606, "uuid": "8a492e4e-62b8-4f04-a896-dfec18b912ae", "comment": "Malware payload (RiseProStealer)", "value": "2dc4d19942c40513808bef745d0fa41f4abb8b3a05b12e86e60fd3232531adde", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741606, "uuid": "5d337eda-e145-4e14-89a2-531d5f65bd45", "value": "T10755337CA66C44E4C23076F241628BD01E4C352A5F4D8D6E236F19B4ED718FF93EAA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741606, "uuid": "b508e047-6a19-4e72-b241-1af778644f69", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741606, "uuid": "925366fd-5358-4137-8b72-2138f708dc47", "value": "24576:F0g0M8kI/sSKn85z6xdpLtuCc1r4tUI+AwQgRHW/nSpr4EsO1kuHqVt:gM8kIESz5zSLaI+AlgR2/S9R52eq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741606, "uuid": "de450c57-5135-4213-889f-941a0786692f", "value": 1325568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741606, "uuid": "7f1ce637-6342-444a-a92d-f939b5f9f4aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39ce4e4f-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1718741608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741608, "uuid": "1159333e-f298-4e4b-b04b-0508bd16ee09", "comment": "Malware payload (Mirai)", "value": "95cd7abbbc21cfa67316f6f66cfdb7d6", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741608, "uuid": "f61e6886-c7d8-4d66-8286-13a172de7bd1", "comment": "Malware payload (Mirai)", "value": "682895d669c00cb40171dccf95804c26d0f621003a1cc92425285ca42d385ae7", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741608, "uuid": "5893893c-c69c-4971-b362-8f8d13917407", "value": "T12F630257A68774C8CC46EC3363A35235A31B19E2EF5E1365EE658C8A24E07C18DE77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741608, "uuid": "52056329-7130-4580-859f-5a3d71510e00", "value": "1536:tYr4t+G4eCfOJ1zuxiFkmlUmsOAnP8fF5wdjKrRnBUqTAlgcVzf:6r4t+veJLlUp8nGKrdBhTAzf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741608, "uuid": "cbbf4111-aa38-48ec-a035-3dc75dbbc029", "value": 72868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741608, "uuid": "7febdcb8-efcc-4999-8ff5-2e9c63633ede", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741608, "uuid": "43b791c6-38da-4878-a530-92c40a1da176", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d0caab4-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718741613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741613, "uuid": "a9ddbb0d-937f-4c82-a74e-bb25e19f46ea", "comment": "Malware payload", "value": "0ab6f3c55cb7a32ca60785d712635dd1", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741613, "uuid": "530905d3-cbc5-4ad8-bf09-bb244cb18979", "comment": "Malware payload", "value": "640ad2203e6347c4dac0348c1d4fec11f96322e634938404921a610e4871d345", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741613, "uuid": "e220887c-879c-446b-8c79-dc997a9f26da", "value": "T11A5302A7E120AC06D9D9BB3B016D34D5547DFB843B2C55BDA8A8529423CBE7E23C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741613, "uuid": "8bf8a22a-2e6b-48e7-bc96-160d06c28534", "value": "1536:fWFZrbi9iXq+SlHplLEs7Lgs6oK+bEJLStA:OT3l6lflLEs7hxKNRStA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741613, "uuid": "ad5e06dc-22bb-4143-8b04-ed81e5ccedd8", "value": 63212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741613, "uuid": "6b89bf2e-2329-4a0c-ace4-4f81e330fb5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741613, "uuid": "5c4443a1-b25c-45bf-a2a3-4ed75ddaa837", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b8101e3-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718741664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741664, "uuid": "3d4a9dd6-e0a6-4a70-b4ca-5987b0440e26", "comment": "Malware payload (Amadey)", "value": "d933a1e34002d784b05aaf813e96bbca", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741664, "uuid": "e4ac640e-18c3-43e9-aab2-500dda52487c", "comment": "Malware payload (Amadey)", "value": "ef5cc39bd536f448498941d058596883d45a1f0c171ec0e6601c73d40671da3c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741664, "uuid": "9cad8d0e-0ab2-4039-af1d-a51363553c9e", "value": "T13995330D1BE68859C91E2D31AAFD164C2B19AEF918DC37CB088EF1ABE017935D5479", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741664, "uuid": "23efdf7c-58d7-460c-8acb-dc87665a2096", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741664, "uuid": "4a092e27-848d-4e7d-942b-b59602a683aa", "value": "49152:kiBbKIGjDt/gWtQ3MLeJZdbvmhS0gRAT18:j2IGdRCpbvmhS0g018", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741664, "uuid": "ff5b5048-f81a-479b-9f59-3115d873b40e", "value": 1879040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741664, "uuid": "b641511b-f2f7-4ff0-b5bb-a7f56157ed1e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6061c03c-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718741673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741673, "uuid": "047b556f-3d64-4420-a2b3-dd3c38236527", "comment": "Malware payload", "value": "f0106634f55069bb4d7e68cd1389ab2f", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741673, "uuid": "9cbc79ae-498c-4dee-9615-6bea55198814", "comment": "Malware payload", "value": "0f02b075066b387286afe10165d216594a1d17ab114dd2f692146f2e6726b255", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741673, "uuid": "6c1cbf29-d7a3-42e5-ab66-d7ad50bd2887", "value": "T1FE5301258373A726DE3E4BB04A4B93C366B6312F19AF28D069FE48529D61A708C374", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741673, "uuid": "6dfc726b-c780-40b5-aa73-e0d164f1d0f5", "value": "768:eKCfoqozoBe37GUqCp5OYnmDKI+2okL2J7nBvshKQ3BkahS8+HrZHifAcd:e1Ns37GlCpYYnmbL2KBxhWrZCfHd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741673, "uuid": "b9282fe7-3cec-4698-9dbd-47a96820096f", "value": 61112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741673, "uuid": "24d8e8c3-4b05-4498-831d-4b5a375f6b16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741673, "uuid": "50ae6147-3e66-4b30-9c1a-89fcbf1e352f", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "990a56e6-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718741768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741768, "uuid": "46425a65-11aa-407d-8f12-ee721a06b447", "comment": "Malware payload", "value": "7beeef914d77a53ddf823773c552e670", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741768, "uuid": "0d7d581b-6b36-415c-9c0d-63abad97ce3e", "comment": "Malware payload", "value": "e53e1b594aa83596cfc7da361bd42a284861183704bd9360841de59f59952294", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741768, "uuid": "a55796ea-a2f1-4daf-a28d-1e18417e7107", "value": "T16B630226AC36ACBCD2AD8E366218D49B7F180BD2D3D5D18270E33D48CF5F624D509A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741768, "uuid": "38d4c874-e599-406c-aaa6-d1d712291a7e", "value": "1536:zt/jWKofymYw5aKcnRSChp7NL5DuvGb+V/XdEc25LPdjFimEW1eU:zt/jWVYw5+nnp7NN+5dEciLdMWYU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741768, "uuid": "c915665d-e4dd-47e7-9881-940165a0ba54", "value": 73052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741768, "uuid": "d6c64100-65c4-44be-8414-99443353c51d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eee4c6d4-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718741912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741912, "uuid": "74c691fe-a908-4822-8882-05d24324d969", "comment": "Malware payload", "value": "a53b110ee7b8d3c2fe883267077217fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741912, "uuid": "b5752210-847a-4085-afd3-8e9f53caf870", "comment": "Malware payload", "value": "21e313fad3e0d7464a9196c073fa2b4d1fbd158b253eb487421c68e5153f8164", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741912, "uuid": "9b45b71b-f956-40f7-90d9-13eeae183e2d", "value": "T1E613E1A92208885AD461F334F5BC1C52BF9F3442F36CBAA3A315CD52E69215CFCB8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741912, "uuid": "09cd4d8e-4343-40ed-a5e9-58a2dd037b1b", "value": "768:mvOd4URhNIM6/UGvXv6YSXwwV8uBnuksCENr94NF/Qm1xgsn6EfAzZqQSRhCPZAT:mGd4IPIdUwXywweWnuksCWrkOEiZjZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741912, "uuid": "9f150078-1753-4cf0-afb8-cd0090ab3e5c", "value": 42704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741912, "uuid": "250be7e2-0643-44bb-b99f-88368541fef7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741912, "uuid": "92718eb3-9fb0-4223-9543-96cd0462c2cd", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18337af4-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718741981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741981, "uuid": "ee653890-4376-43c1-bc4d-20c043cad820", "comment": "Malware payload (Amadey)", "value": "859a4c80a29343a0a6a207da2131d1de", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741981, "uuid": "8d7d2c8e-6091-4138-9ad5-168d5581d0ed", "comment": "Malware payload (Amadey)", "value": "cd542de7a294a308e588e394dd615360bea873bc4d0f45f2a4f2c33eb97ff51b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741981, "uuid": "8d11f0c7-a6b7-47ed-87ab-8abd644f7a37", "value": "T1529533321C5217D4CC210B75B9EEB727A2149DEE3AFE55A04E6C23F3D1924AA781DD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741981, "uuid": "1ec2489f-fb0c-4440-bcbd-8a89f6a34162", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741981, "uuid": "a0c3f20b-6b90-436d-867f-49d12ca14ee7", "value": "49152:mOdi0AMpfo833CWbTRPUqTqx3tL/VSWqiOnVL0MFzb7cAF:mSJzO8HFMq2xdD5r9kF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718741981, "uuid": "3606e168-efb2-4457-845a-aafaed2ee77b", "value": 1906176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741981, "uuid": "ebfaf46b-2b9f-4476-8d1b-2cd38fa4495b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dfc73c3-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718742018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742018, "uuid": "4a533753-ccbd-4757-8ba4-44ec85d3798f", "comment": "Malware payload", "value": "2d818b021b5549a8d33dcca1f8aab131", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742018, "uuid": "e3bf1209-eef0-430d-a58a-06885e0c024b", "comment": "Malware payload", "value": "753190786524a117f616c0fed3db2cb1c684ccb542dddcc0e3cc3516b1f1dabb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742018, "uuid": "9688d017-0242-4b64-afca-9b96e29521fe", "value": "T13D5302F01B91C390E09C8FB10B9D9E39B2D95B4A17953FFAE08C7D934EBE095C525A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742018, "uuid": "0b8185fa-eedb-42e7-b162-647541ae984d", "value": "1536:gLsWbN3fUQSMrgpmMuPreWtp3cQjfLI2URvkPp:gtPkYQmMuPpb5sBU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718742018, "uuid": "a51b5c12-4ce4-4f95-be86-16eaa5885613", "value": 62588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742018, "uuid": "b5b84b20-0bf4-4b89-b93e-0341c59bdf86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "539b11e9-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718742081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742081, "uuid": "f9cf9e54-a7ad-464e-99b1-f4aa735aed86", "comment": "Malware payload", "value": "c557201875287488b9f38123916c40e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742081, "uuid": "22987a6d-6b1c-4a4d-8e82-a3f816cd851c", "comment": "Malware payload", "value": "c78728c01c81847f51fad4c13a17cf6fd1ad7c780289d9e50c89d29a0bc9fb0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742081, "uuid": "79f027bc-cb64-4006-90f7-6f0388184ca5", "value": "T13913F1A635DC42FCE80660BE9BF96DAA55F0C0058BAFD4D24EF5DCE441C15246432F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742081, "uuid": "9d1631db-f791-4914-a79d-afbbab1e4bca", "value": "768:s4eSyPJEIf5G7BLRhavquilysYdh3ThuYCjdI7/ydqkiDAX0PeL3I:obBE+G7BthaCuKysMrVEq7/ygkFYE4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718742081, "uuid": "4864c828-a939-4487-a08d-9cf81bbcb1a1", "value": 41488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742081, "uuid": "cde30b4f-fa79-4650-8df9-bf0576f21dfc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742081, "uuid": "7cd48070-f1b5-42ca-a057-9fd30a6a8d6c", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28f152b8-2db1-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718742439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742439, "uuid": "636d25bd-af09-4c1a-bf7a-52b9de2e841e", "comment": "Malware payload", "value": "2d75a0a667a6a930afdfe6d6d1d0b4b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742439, "uuid": "06229dbe-a872-4c79-846a-a1d9c7c057fa", "comment": "Malware payload", "value": "6ca9bfc2d63ac7167ed2ecbbc85b1c265c5c151d60e12a89f90e919f73a3d5cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742439, "uuid": "4ca52014-9b9f-428e-bf3e-8c3dc9e8cf14", "value": "T1F86301E84E07BA88C7B35B301C579DFEA7298591E468C53F52A09B85791BDE370583", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742439, "uuid": "d1b521c7-6350-40be-b622-f83a2087f890", "value": "1536:6S4uXkbR4LhqpvbzwM1FhLFxoruIEEf0eWDeESdW1/v5jVv8LCkgri9:t4uUbRahqpDzR1IviSEKSjyLPg29", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718742439, "uuid": "0de37389-28f0-4e57-aacd-a353eba23e22", "value": 71060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742439, "uuid": "035e7890-a66c-47d2-8b24-d51c841625a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742439, "uuid": "a0af336e-4f8e-461d-af54-1d7faba4da02", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fbbc849-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718743282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743282, "uuid": "1d7ed560-c19e-431a-b8cb-13096c230ad6", "comment": "Malware payload (RiseProStealer)", "value": "9e27ed6d9855b9bfae9234f0303a8bba", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743282, "uuid": "5c03fd93-f9e5-4f31-9d8f-479cfd8acabe", "comment": "Malware payload (RiseProStealer)", "value": "c6f191166cd7e544a7b04cacfba844ba6c9bdb31cae43fa2c34b693ed828aacf", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743282, "uuid": "97354841-1a1b-4323-b3a7-94193e2fa646", "value": "T1325533F8F646D5E5C9002F320649C268561A759A4B399CBBF0FE075286356FFA33BD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743282, "uuid": "986db19c-3e10-43b8-9653-00442ed4a521", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743282, "uuid": "a8727ad7-82b5-4d64-93c7-97515e501d92", "value": "24576:0zZBRRB1KrdJWs44a5oK0un6PEcwQCKiyIakELasPJRP:0zZJedtbyX0u6PEclCfL8akD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718743282, "uuid": "8d5bd621-938c-4286-9fb8-ead26ce3bd78", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743282, "uuid": "de2fefba-240f-47c9-af20-72496bf58493", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81a2b618-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718743446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743446, "uuid": "03e5a1b1-e3ec-400d-8d01-65c32204155c", "comment": "Malware payload", "value": "9e62b88f914abdb8804ecfd217cb78ba", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743446, "uuid": "00a0475a-1e21-4db1-81b1-63868f44464f", "comment": "Malware payload", "value": "e4509a465c228fc0c199ebd4b35ddb298de21a6b7aec9d2e5386cc7a589894ce", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743446, "uuid": "d6166a58-909a-4dbe-8ddb-563dbb056721", "value": "T132531255FBCA1097CEB55579C03D52E9C03D1BD3E30C25286E85838EEAB98EEC48D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743446, "uuid": "c016844c-7896-49d8-9595-c40e454a76a9", "value": "1536:cn78RE31VoraFEr5ynXIKc1pKwDnPpMBx4KtSd0lE5DMFSaLjt1:a7ZUraaMY8qpc8doE5Dkvt1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718743446, "uuid": "26d2510b-a3eb-47bc-b179-cb6bf60ba8f0", "value": 65076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743446, "uuid": "31e229d4-92f8-4fe7-9c68-b0a4daa70014", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743446, "uuid": "659ace95-9666-48c8-bd49-0cdbfa4e48f1", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf010bd1-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718743979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743979, "uuid": "3770a26c-49f7-4577-9d2c-3217e33c2bb8", "comment": "Malware payload", "value": "5119e5fc21a0bec4a1ee3aaf06ac8680", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743979, "uuid": "88c3acba-a3f3-4906-ba29-48751d19a3a3", "comment": "Malware payload", "value": "6deefecd0ab6e845dddae725c91b82c6f47c52f1bb24c005189cae864efa9d74", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743979, "uuid": "ab8aceb6-bf6e-49b5-8908-8525e7323124", "value": "T112A48C1272E06C28EEB64B325A39D6A4EB2FBC625E75528E3254FF1F09731E5C5127", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743979, "uuid": "7d3c0606-b002-4fa7-a075-501744054782", "value": "7b4a939d23ed2de2d7a43f6ef0c3270e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743979, "uuid": "077e00a2-4b4f-4771-82cb-dab608f49c9d", "value": "6144:ELFRl9coR5cliGApjaKYi3HcUP7p5fI/8DXEh/CUlDnpmEKWUFlW:EJ91R5jjaKFV7HfrK/zzxC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718743979, "uuid": "0c5e024d-74b3-4180-8f78-ffe740de425a", "value": 453120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743979, "uuid": "e497e082-49ef-4068-a900-3c345e9ebec3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44e3c9eb-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1718744633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744633, "uuid": "91192db1-8ef2-4410-8153-1454f79ecd7c", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "99520e32dd9d5f5125e4c2a863ce1914", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744633, "uuid": "dfafffe0-3e6a-456e-9ae7-fc9b24bed5e6", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "9067825660559aade7ce05cfd6cab6e5dc7ec7e6e40e91e1a27fe8aef8ca657b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744633, "uuid": "47cf5dce-9083-4bc1-8825-5f2b757589ed", "value": "T178E4BF5266E06820EEB78F314A39D6A89B3FBC625A70529D3274FF1F09731E5C6127", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744633, "uuid": "ac265aa4-f16c-4049-9dd4-9d0408038474", "value": "7b4a939d23ed2de2d7a43f6ef0c3270e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744633, "uuid": "6d4dbe24-30ae-4450-845d-8bf54b96d88f", "value": "12288:1oqUjxmTfeZwTHuaaOwNNAHH0NofX4+t:WRxofeZwkXNNAXfp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718744633, "uuid": "964168f7-419d-4da8-827c-4aa34d4c2dea", "value": 657408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744633, "uuid": "04bfac61-1252-4179-862a-fe6c6393867b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8d7c1f4-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718745713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745713, "uuid": "ca106cd0-1f83-4543-8b30-acc2925398b7", "comment": "Malware payload (Amadey)", "value": "b702e6456ab8cc32654546e7a3bfa42e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745713, "uuid": "e68b0639-ef15-471e-93e0-26c265558795", "comment": "Malware payload (Amadey)", "value": "561d6a6e5dc19d5c5b14c5eeeb1585be4b976f02b54d36b60a295fab547029d9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745713, "uuid": "b7adbd0d-e856-4b46-84bb-bb0e9a4f9abe", "value": "T157B49D12A2E16825EEBB4B337A39C2E4AB2FBC625E74528D3154FE1F09731E5C5127", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745713, "uuid": "708aa5d0-97cd-4add-b611-7229d4c1cc98", "value": "7b4a939d23ed2de2d7a43f6ef0c3270e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745713, "uuid": "9e3b1e2d-1439-4cd1-adde-f9c531314905", "value": "6144:OALXRXckM9TYIvvVX4i91vgIyIfPuSDurzUTm34zzJFSxe7jg9kF5:OAxch9TlvZ4+1IIyI3uSDu6JFtjg9kF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718745713, "uuid": "9e027e3d-5b78-4e94-a9b0-6a47d1558760", "value": 503808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745713, "uuid": "2a22e7e6-ef74-4085-80eb-3f721c7f28ff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a02eb8e-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718746279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746279, "uuid": "4f316ceb-1f4f-4db2-bdf9-9a50c46a4f74", "comment": "Malware payload (Amadey)", "value": "aad7bd3de559cdddd03b6f70a3f661d6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746279, "uuid": "03e50341-fb2b-483e-8f5a-f7b74c0a7bc0", "comment": "Malware payload (Amadey)", "value": "f65cac759767365c29ba40498bbf4260153a6dade545a078f54088a61dcea732", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746279, "uuid": "e61d4132-ea6a-47fb-bd86-b766cb1d385e", "value": "T10A95330E4F38316AC4D3DAB1F7CB07CFA25BCE64166E2E4C576851729F71EA4897A0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746279, "uuid": "eaa13c57-d21e-4704-9ee2-226676d19fdd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746279, "uuid": "a40cb986-3d47-462d-8be4-78474f96605a", "value": "49152:OI03Tcpe3dDbLLyiYTViPFwpU/yn1mttGcm0fmbQy:cccfLLFYxiPFwmK1mecbmQy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718746279, "uuid": "17c839db-fae1-4cbb-a6f8-55f2380c859f", "value": 1891328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746279, "uuid": "56df5f59-c19e-4033-a461-7b2d9000acfe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "788b00f3-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718746867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746867, "uuid": "4ee45bc3-8c81-40b3-bc59-335f12441398", "comment": "Malware payload (RiseProStealer)", "value": "fbe93e04bdce80b4757d8aafeaa3f0c9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746867, "uuid": "7255b2e6-de14-4a6a-b7b1-fed60ed10f8f", "comment": "Malware payload (RiseProStealer)", "value": "f7b76a7610d22f1769c42da095fe4b8127d8760afc52da63df7bf5b9f5c5ea63", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746867, "uuid": "c43e3b97-c588-419a-a9cc-ee6607301645", "value": "T1A55533B0AB73EF70D301E9FB914A1AA0E2687A5E6885DF57748F48E44D982FC73D10", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746867, "uuid": "65f5c938-f72d-44be-97fa-77b43fafcb0a", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746867, "uuid": "118ff0da-c6c7-4440-9324-954a5badf9d9", "value": "24576:5fJB1p/tJYfLBLcLwAb6ZtkZCywQrRHW/nS+ro6Ya80pBe:vtIJQfWLmCylrR2/S+0qB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718746867, "uuid": "d0ef16cd-73cc-48ba-8843-d6f79c489cbb", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746867, "uuid": "72fd3f64-2f29-46bf-ba99-562dc1dc9906", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fe2ce7c-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1718746933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746933, "uuid": "031269f1-0cb3-4b4c-8ebb-c76dc7f3109c", "comment": "Malware payload (RiseProStealer)", "value": "06c7dd3d135334d5cfea978baf49b60d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746933, "uuid": "a6ffc758-0c40-41c1-b0c1-a4afa130c965", "comment": "Malware payload (RiseProStealer)", "value": "7c41fb65cf7fffabc3c3b9d0072b166a43f2b596c8d509523fa8303612c1913f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746933, "uuid": "687353bf-4cf8-4227-8aad-b2dd8c505656", "value": "T1EB5533F6C6335700E2F45DBE84D9D0942E35FAD92605DA172037E68528B23EFEB668", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746933, "uuid": "57c2421a-09ab-4cc0-867f-de8f838af7b1", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746933, "uuid": "2a4435b4-88c2-4a2f-873c-6b08fc45fba3", "value": "24576:qMAdJoWETZ+K6jBgZeCAyhxwQl6icoEC5LeZbmM4xtLI:qMeuZ+KABg1/hxlUoEzZH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718746933, "uuid": "c5cebc9d-e538-4ee9-b3f3-bf55240ba09d", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746933, "uuid": "c7a938a2-362f-4ddd-a06e-f9845e922b06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19fec9ac-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718747138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747138, "uuid": "543594b1-f773-441e-bb2d-d791548d7e94", "comment": "Malware payload", "value": "21e1b6fa020c3ec2ffbf2327fa4e6856", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747138, "uuid": "13979dc6-d36f-40bc-8ded-40aa4616ec92", "comment": "Malware payload", "value": "89f1914c1fe7d88382bb26057ad3ec96911c84fc2b17a11275c4142e1c517475", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747138, "uuid": "6fbe4ff2-fa74-453b-941c-c072ba347953", "value": "T13A45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747138, "uuid": "4a58665c-db2d-421a-8138-49e90507cb8b", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747138, "uuid": "ed859c53-066d-45d1-a57d-e6328fff14a7", "value": "24576:hqDEvCTbMWu7rQYlBQcBiT6rprG8auG2+b+HdiJUX:hTvC/MTQYxsWR7auG2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718747138, "uuid": "86d5f112-e962-4e83-9f7c-e343e770e95c", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747138, "uuid": "53942ca5-8c50-4dcb-b596-009cb8002e35", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5224cb1-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718747908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747908, "uuid": "747fb11c-5f10-4311-9566-71e8baa571ca", "comment": "Malware payload (Amadey)", "value": "d9a7046f1c048f34148bcf0e50a37bce", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747908, "uuid": "6c73be67-0636-48db-86e0-1ef4edcdb97f", "comment": "Malware payload (Amadey)", "value": "fa3e78672702858c3ba3df9b2b9498f15c097cd559eee89b2e48daf04947d49d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747908, "uuid": "f6bb1f6d-0554-404b-9df8-8a60b03aa72b", "value": "T154953317DDB39666D93B6972A3B6CF767972280903338DAA8C470474C3B315E79232", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747908, "uuid": "3f7cc353-3f3a-4f38-b510-f3aa76856b90", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747908, "uuid": "e23a05bf-267e-4045-b6ae-5e547e436aa3", "value": "49152:jY7AULoq3bcrlhg9AyPW0qlJ+AHIfhVwf+Q3RY3CHtTM8vfJxqOS:87A6f3cl/0DA4hif+Yu3cTrJ0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718747908, "uuid": "e28834d6-69f1-4417-bd7c-26e46aa3c5ce", "value": 1936384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747908, "uuid": "ee1722aa-2ee4-4b91-a2d5-5d709c41de7b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c43f9b39-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1718751289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751289, "uuid": "3354c81a-191e-4a30-8e55-aa0136ade1d6", "comment": "Malware payload (Amadey)", "value": "202a86af444f02afe35478c115432a71", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751289, "uuid": "ea7540fb-3019-42b0-b50b-fce926673308", "comment": "Malware payload (Amadey)", "value": "22771da87dd994bde5d377d48a9f7524d9170908fe7e41f80ae91317212d864c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751289, "uuid": "31be129b-35c0-4b02-93c4-ab9fa29dd1bb", "value": "T16F85331F1E313DBCEB6D8F36592B3F6AB6C556E4C9D8A1200A209B75843775338364", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751289, "uuid": "543ed8c8-b68d-4070-9966-3cf0b759f821", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751289, "uuid": "d99b7ce9-d774-4cb9-8b80-3687d6072235", "value": "49152:76VbPJHF9xeF7+FQ96Lo9vGSHnGdLnrbQcGjo:7OhvxDW968s+cLrbQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718751289, "uuid": "807bdf9c-9cab-4e33-a1d1-21a7858b98ff", "value": 1871872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751289, "uuid": "6976112d-447c-42ca-8ee2-0ea3efd46228", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb902426-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718751355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751355, "uuid": "e51abe99-f5ee-48ed-8cc2-06549220db23", "comment": "Malware payload", "value": "174a5b247dfedca8603e58b40718ef5a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751355, "uuid": "7732374d-4ac0-43aa-b383-0ca1fb1ecfcd", "comment": "Malware payload", "value": "102c57a263fc241d4d86b901a3fb486e4f29e99582325ce5ec45aa0fe0e0579b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751355, "uuid": "ee74ba29-9d6a-485d-a794-77d401e51d26", "value": "T1B0159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751355, "uuid": "12d0058d-ec9e-446a-94ba-fd6529df6941", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751355, "uuid": "702392c0-f530-4b6b-8687-8a275f1948e9", "value": "12288:RqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T/:RqDEvCTbMWu7rQYlBQcBiT6rprG8aA/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718751355, "uuid": "4fcc3390-af11-4012-9578-96497ad8af9f", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751355, "uuid": "b66f9d39-d960-4802-a347-e269d2f97916", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d39f20d-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1718752271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752271, "uuid": "52098e2b-b3e2-464e-a5bd-717e802a94d6", "comment": "Malware payload (Socks5Systemz)", "value": "18bcc92e8f9a9856f25ae1920086fecb", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752271, "uuid": "acf72941-8ca8-4317-b6cd-1efe70b0e921", "comment": "Malware payload (Socks5Systemz)", "value": "b6a8859016aab782db9383a91f4db7e4f214cfc5563e2e7cf4d0400458f1d10b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "IRCbot", "colour": "#a58fb1", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752271, "uuid": "d56f9f53-833a-4cc4-ad94-ec95acc168f0", "value": "T1A826334354AA38B5E1BA88BC0983F0C745C13FD2563C6D24B36419BEBF9B64A519FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752271, "uuid": "fabbc031-d4e3-4daa-8f50-68b64c1850de", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752271, "uuid": "b8b58cd4-b0e8-451c-8ca5-69f72b5f4bc6", "value": "98304:mjtuvA9KE06SsN8zsInLFniCWjIqiq4P0bKJ9SIWkPHzgs:ZIEEesNus2Fiqq4P0KeXkz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718752271, "uuid": "fb67a6d8-088a-4aa2-96b4-92ac500c873d", "value": 4825004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752271, "uuid": "509a5541-a2ef-450d-bbd1-e6640811dd34", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37657107-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718752402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752402, "uuid": "698497ef-c4bd-468a-a8d5-77a956ef5420", "comment": "Malware payload", "value": "33d8aee60ca93af7aa63dab9a829e4ea", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752402, "uuid": "3795c034-0f35-4899-8e45-f7f74ddfecb8", "comment": "Malware payload", "value": "b2df173421ef64a403800c14f87343f5a73d3fc40136d47f699580d133cccac1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752402, "uuid": "06f44ac1-98ef-4714-b6e7-8c5d7067cfe6", "value": "T192553378627A9964C340A5FCE06803488E9CFD56E70DCF2393B75961429CE6D3B2B4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752402, "uuid": "253653d5-0385-4fe7-b240-3d558344a4e9", "value": "b7ce6ea073161d3449ba26dd2c859ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752402, "uuid": "89c9c799-9b97-4180-98b2-f9d6a75b17e5", "value": "24576:hHTAW6TI7ZTYFowHK0UdYa1IkU6EpwQLRHW/nST/mKq9d7g:hHcpId6o5YaZUzplLR2/STI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718752402, "uuid": "f372c699-6774-4e6f-ad2e-3c983f0e2cc4", "value": 1325056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752402, "uuid": "d4e56f56-df5c-4e25-b7dc-11070b1c7d14", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48a5d0be-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1718754947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754947, "uuid": "d71c178d-81c1-41d2-9697-5d9d0b920563", "comment": "Malware payload", "value": "706ac01d77023f641bdb31421dd1249b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754947, "uuid": "215c330d-e890-489e-a95f-d631fe6812b3", "comment": "Malware payload", "value": "a9f7142ec8a231ae13735d6d6a19fece19e6af7c5ad3c65220c64f7a143b4d2d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754947, "uuid": "7f004cd8-e723-4226-a6a1-983a4a0cca98", "value": "T1F29533820E2B7146CF99C87EC933E752A52FEA627538484DFF3445341EA37E9B9972", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754947, "uuid": "88592ed3-62db-4253-91e5-23968b06e473", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754947, "uuid": "5c73d887-4b23-4a7b-ae59-8bae003ac476", "value": "49152:muQDFn90BVTxbPJ6zZW28iVWZVMG9iKApDe+:zwhSBVTxbBm3WZVme+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1718754947, "uuid": "1a497316-22a5-48a1-b1e1-bfd9c054ac91", "value": 1949184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754947, "uuid": "5ddec19a-638d-4774-a1ed-0b5f1e9ef591", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668924, "uuid": "feb1ef37-2d05-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.72/arm4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668925, "uuid": "ff2249a8-2d05-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.159.32.6:52002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668925, "uuid": "ff4e9114-2d05-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.72/mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668928, "uuid": "0160a107-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.131.243:32933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718668954, "uuid": "10874d8a-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.72/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669000, "uuid": "2c54464c-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.250.14:55719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669045, "uuid": "471f9a33-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.149.31:42448/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669047, "uuid": "47f45e4e-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.106.191:43564/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669066, "uuid": "537d8ef6-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.189.88:50685/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669074, "uuid": "586112df-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.72/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669108, "uuid": "6c94d101-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.71.159:41403/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669167, "uuid": "8fcbc21a-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.204.111:55311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669285, "uuid": "d63d0cad-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.112.27:42148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669286, "uuid": "d660a513-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.38.179:56004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669289, "uuid": "d88b090a-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.63.106:37691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669409, "uuid": "1fef353c-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.101.132.143:45256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669465, "uuid": "4182c460-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.82.99:42349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669465, "uuid": "4188aa83-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.36.75:40396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669478, "uuid": "4916a0f4-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.31:51671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669493, "uuid": "51c12d5d-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.152.12:34177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669525, "uuid": "65226e1a-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.118.174:50132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669587, "uuid": "8a29de00-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.85.195:44266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669590, "uuid": "8ba21573-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.145.20:55614/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669714, "uuid": "d5dad55f-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.114.115:35379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718669886, "uuid": "3c4f51ca-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.101.118:52399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670009, "uuid": "85810410-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.216.235:43447/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670010, "uuid": "863cdbb2-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.184.160:33876/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670040, "uuid": "97ec416e-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.211.100:46548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670065, "uuid": "a6f6dd19-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.110.8:60277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670065, "uuid": "a7043cf8-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.53.56:47340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670066, "uuid": "a78f2d31-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.221.239:42935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670186, "uuid": "eedd580a-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.254.181:35607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670186, "uuid": "eef06e16-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.95.119:55582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670215, "uuid": "003934cf-2d09-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.23.182:34036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670489, "uuid": "a39c6dcd-2d09-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.85.195:44266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670503, "uuid": "abb8cb5f-2d09-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.250.14:55719/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670672, "uuid": "10d473e5-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.151.195:48109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670787, "uuid": "5580438c-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.7.64:34502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670850, "uuid": "7b0d0b08-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.170.216:40474/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670851, "uuid": "7b8b84cf-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.232.154:49560/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670853, "uuid": "7c9f18ee-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.83.220:45804/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718670858, "uuid": "7f60bfa8-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.78.77:55601/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671033, "uuid": "e7b317f5-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.110.233:57960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671085, "uuid": "06ae22f4-2d0b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.145.20:55614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671208, "uuid": "505908d7-2d0b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.114.115:35379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671326, "uuid": "96b5373b-2d0b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.41.48:36811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671445, "uuid": "dd6a5b1b-2d0b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.110.8:60277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671450, "uuid": "e02bc440-2d0b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.232.80:47747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671508, "uuid": "0304e4e5-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.7.64:34502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671508, "uuid": "03136b41-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.42:56806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671508, "uuid": "0344e5a6-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.76.158:6200/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671509, "uuid": "03616fdd-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.116.120:54393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671509, "uuid": "039560c3-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.228:53954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671517, "uuid": "087780a1-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.215.77:39425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671626, "uuid": "49478c57-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.205:51707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671628, "uuid": "4a97eb8c-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://btyv.pages.microcloud360.com/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671751, "uuid": "93e5ded9-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.211.100:46548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671809, "uuid": "b6281f7d-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.28.132:51322/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671866, "uuid": "d87652b9-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.85.98:48251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671869, "uuid": "da263aa3-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.90.61:60985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671895, "uuid": "e9bf9c8e-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.223.34.35:44591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718671926, "uuid": "fbf5f104-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.254.181:35607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672046, "uuid": "43ba1622-2d0d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.42:56806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672108, "uuid": "68d2e89b-2d0d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.79.46:41661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672225, "uuid": "ae974e74-2d0d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.125.118:43851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672467, "uuid": "3e659e02-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.110.233:57960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672511, "uuid": "58b138b3-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.43.147:59174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672525, "uuid": "614eff39-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.41.48:36811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672526, "uuid": "61939fb7-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.245.140:47236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672591, "uuid": "883b3921-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.206.127.4:51392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672660, "uuid": "b173389c-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.155.19:45835/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672709, "uuid": "ce9592d5-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.52.168:43742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672715, "uuid": "d2606232-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.223.103:57090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672730, "uuid": "db7c074a-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.22.103:57844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672782, "uuid": "fa2b15c1-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.223.14:44351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672827, "uuid": "1578e28f-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.228:53954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718672901, "uuid": "417ba133-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.87.47:39026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673025, "uuid": "8b44b2b8-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.29.40:53541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673128, "uuid": "c89c703d-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.102:35981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673214, "uuid": "fc133895-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.127:48657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673246, "uuid": "0efa9847-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.186.188:34658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673309, "uuid": "3442fdf8-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.18.50:37222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673433, "uuid": "7e273534-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.175.65.105:40381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673499, "uuid": "a5b5684e-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.210.98:59248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673550, "uuid": "c3f90aaf-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.226.221.120:42876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673621, "uuid": "ee93c682-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.108.108:38364/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673666, "uuid": "0977ed66-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.85.98:48251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673667, "uuid": "09b6bd66-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.125.118:43851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673671, "uuid": "0c5afdda-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.41.161:42793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673908, "uuid": "997390cb-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.45:36584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718673970, "uuid": "be92e254-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.176.3:58438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674034, "uuid": "e45f11cd-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.5.199:51276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674212, "uuid": "4ef17ac4-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.22.103:57844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674214, "uuid": "4ffc89ad-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.206.127.4:51392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674242, "uuid": "608ff433-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.185.73.84:39770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674272, "uuid": "7283b91c-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.71:42460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674388, "uuid": "b7cd9743-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.70:60147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674447, "uuid": "dafac3d9-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.17.112.189:48341/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674448, "uuid": "db15cb56-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.195.233:39550/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674512, "uuid": "014e6b89-2d13-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.209:39194/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674865, "uuid": "d41e0cbf-2d13-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.13.139:59287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674895, "uuid": "e5d69546-2d13-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.176.52:34616/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674926, "uuid": "f8170c72-2d13-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.102:35981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718674960, "uuid": "0c905f25-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.4:43467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675287, "uuid": "cf2e731d-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.171.25:39539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675346, "uuid": "f297ebe7-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.1.103:53496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675346, "uuid": "f2c4f78b-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.29:33487/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675346, "uuid": "f2c8dfd4-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.85.209:47338/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675346, "uuid": "f2d12870-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.130.182:38808/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675348, "uuid": "f3866344-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.95.161.44:50469/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675348, "uuid": "f3cde33d-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.226.221.120:42876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675348, "uuid": "f3f7c735-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.72.194:52313/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675412, "uuid": "19e37e7c-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.113.102:46168/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675412, "uuid": "1a23d364-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.54.123.141:51760/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675528, "uuid": "5ee50911-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.164.88:47424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675599, "uuid": "89a5e18e-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.109.68:57454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675616, "uuid": "93cd8169-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.38.118:55288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675653, "uuid": "a9a68466-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.93.100:51268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675708, "uuid": "ca90d7e3-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.160:57368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675709, "uuid": "caf4d5fc-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.177.153:49182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675766, "uuid": "ed043339-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.98.142:41765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675767, "uuid": "ed752041-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.7.136.160:58732/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675767, "uuid": "ed956d91-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.100.17:60619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675770, "uuid": "ef133174-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.5.199:51276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675885, "uuid": "33e8316d-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.209:39194/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675885, "uuid": "3418d35b-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.11.164:55754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718675886, "uuid": "34bf930c-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.186.215.138:51300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676011, "uuid": "7f308f02-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.185.73.84:39770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676014, "uuid": "80a93fcd-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.102.197:44972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676066, "uuid": "9fe1137e-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.210.98:59248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676067, "uuid": "a0823cc2-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.70:60147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676068, "uuid": "a0f89e78-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.104.225:46790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676246, "uuid": "0b1d1d99-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.135.23:46994/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676248, "uuid": "0c1fbedd-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.96:57577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676309, "uuid": "30d7646c-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.138.7:56827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676312, "uuid": "32997563-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.6.218.94:59911/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676366, "uuid": "52a024e0-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.42.200.58:37235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676367, "uuid": "52f270ba-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.4:43467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676443, "uuid": "80593f2b-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.235.45:33285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676485, "uuid": "99b04d05-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.13.139:59287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676486, "uuid": "9a02fba2-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.242:54892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676666, "uuid": "05446b2a-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.177.153:49182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676731, "uuid": "2c55ba36-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.60.80:58694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676732, "uuid": "2c95fe1b-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.254:50565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676846, "uuid": "70d3230a-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.93.100:51268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676909, "uuid": "9686e8fa-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.1.103:53496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676922, "uuid": "9df94c9d-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.46.141:48165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718676966, "uuid": "b8656705-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.171.25:39539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677090, "uuid": "025cd5ce-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.175.174:35554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677106, "uuid": "0bc977db-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.183.89:45439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677150, "uuid": "2627f5a9-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.41.106:41102/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677210, "uuid": "49b1c876-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.209.158:41129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677216, "uuid": "4d82b02f-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.74.155:50343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677269, "uuid": "6cd51b1d-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.7.136.160:58732/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677476, "uuid": "e7fd880f-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.82.252:58566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677566, "uuid": "1db91595-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.11.164:55754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677566, "uuid": "1dd506cb-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.98.142:41765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677567, "uuid": "1eb2b38f-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.129.184.122:33174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677817, "uuid": "b39eafc8-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.121.134:52527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718677899, "uuid": "e42347bc-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.144.4:60783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678049, "uuid": "3d82d69c-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.213.2.232:55931/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678049, "uuid": "3db4b635-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.136:44685/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678049, "uuid": "3db51cc2-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.224.15:50737/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678112, "uuid": "630d998a-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.235.45:33285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678166, "uuid": "83ade020-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.42.200.58:37235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678287, "uuid": "cba45fab-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.102.197:44972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678348, "uuid": "f03801db-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://184.60.63.153:42254/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678349, "uuid": "f0493a32-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.33.255:36780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678468, "uuid": "3734a0dc-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.46.141:48165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678586, "uuid": "7dba8aa7-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.130.71:41461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678646, "uuid": "a1afbcff-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.60.80:58694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678647, "uuid": "a24ddc8c-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.179.51:59510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678710, "uuid": "c77d874d-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.202:57106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678886, "uuid": "30b2a2e2-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.84.15:58356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678886, "uuid": "30d9f5ae-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.93.81.14:36752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678886, "uuid": "30e939cf-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.74.155:50343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678946, "uuid": "543006d2-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.23.37:56626/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678946, "uuid": "546c4f3c-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.128.6:56365/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718678957, "uuid": "5b36072c-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.78.75:55139/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679067, "uuid": "9cc157c5-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.129.184.122:33174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679308, "uuid": "2bf3452a-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.224.13:49437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679365, "uuid": "4e0e12bd-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.121.134:52527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679365, "uuid": "4e426d17-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.26.194:45746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679368, "uuid": "4fc734aa-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.109.91:54113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679377, "uuid": "55081e5a-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.136.225:57177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679486, "uuid": "95fc38fd-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://184.60.63.153:42254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679514, "uuid": "a7388f88-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.51:48388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679687, "uuid": "0e08cb1b-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.2.57:55041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679785, "uuid": "48b7c9f2-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.206.81.178:52645/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679788, "uuid": "4a0a53d1-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.90.26:48187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679815, "uuid": "5a4ba3e6-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.133.51:40921/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679847, "uuid": "6d76cc52-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.177.96.20:34145/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679858, "uuid": "73d93e55-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.136.142:44864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718679909, "uuid": "921c7c62-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.219:45875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680026, "uuid": "d8407874-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.69.117:56007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680087, "uuid": "fc62b507-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.33.255:36780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680091, "uuid": "fe9777ff-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.129.136:58580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680146, "uuid": "1f5fa051-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.150.181.21:57999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680146, "uuid": "1f8122ca-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.121.150:33159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680147, "uuid": "200019aa-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.237.66:50943/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680210, "uuid": "4588aeed-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.75.186:52653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680266, "uuid": "6725273b-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.84.0:34006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680267, "uuid": "67ad8cd7-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.92.185:51723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680386, "uuid": "ae67c730-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.71.77:44377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680445, "uuid": "d20464f2-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.129.109:35765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680446, "uuid": "d26fa8dd-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.202:57106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680509, "uuid": "f7ee8054-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.93.81.14:36752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680511, "uuid": "f95c8fce-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.191.49:60382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680566, "uuid": "19ffaa88-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.148.42:47744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680567, "uuid": "1acfa22c-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.32.42:49879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680641, "uuid": "4686010b-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.179.118:58041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680642, "uuid": "47619bb1-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.220.88:50802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680702, "uuid": "6b36e43c-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.184.72:59540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680747, "uuid": "85d1e3b3-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.133.55:59642/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680748, "uuid": "86a6fc49-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.58.63:34851/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680753, "uuid": "899b9b21-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.233.161.89:40146/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680757, "uuid": "8b9c902c-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.143.142:47444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680758, "uuid": "8c63cd26-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.189.232:34790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680808, "uuid": "aa71f6fc-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.198:43708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680809, "uuid": "ab07d9a2-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.13.1:49618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680812, "uuid": "ac66a621-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.138.78:33609/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680815, "uuid": "ae59c919-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.18:49002/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680866, "uuid": "cd15030b-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.201.218:45614/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718680868, "uuid": "ce2fbbef-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.137:50145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681108, "uuid": "5cdf6ae4-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.175.148:56743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681112, "uuid": "5f97e527-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.185.96:35088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681166, "uuid": "7fb3394e-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.101:38114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681201, "uuid": "9434a52d-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.139.69:40027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681226, "uuid": "a31a600e-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.220.48:45237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681227, "uuid": "a3cd0098-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.51:48388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681230, "uuid": "a5ede673-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.82.202:60304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681285, "uuid": "c66a8ace-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.26.194:45746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681285, "uuid": "c6716f6f-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.175.151:34257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681290, "uuid": "c9a8fa17-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.197.190.213:45590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681345, "uuid": "ea6c1b0a-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.2.57:55041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681345, "uuid": "ea90646a-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.26.237:55049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681414, "uuid": "133a2625-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.90.26:48187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681527, "uuid": "5707a19b-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.129.136:58580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681536, "uuid": "5bde9eed-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.133.14:47134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681649, "uuid": "9f432f15-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.179.118:58041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681649, "uuid": "9f479b0c-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.209.72:41845/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681651, "uuid": "a0ab2841-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.177.74:36028/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681662, "uuid": "a73fed49-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.237.162:33813/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681711, "uuid": "c453d043-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.222.184:43298/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681766, "uuid": "e54b80fb-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.4.121:48477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718681950, "uuid": "52bb9739-2d24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.210.220:46061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682008, "uuid": "75a4329d-2d24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.144.197:40457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682129, "uuid": "bddbe847-2d24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.42:33762/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682204, "uuid": "ea2cb6a2-2d24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.196:51323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682247, "uuid": "0412452b-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.68.94:33539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682309, "uuid": "28b29cc1-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.201.218:45614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682309, "uuid": "28dd57d8-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.168.11:48848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682309, "uuid": "291ff2db-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.61.223:33540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682310, "uuid": "298340d0-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.190.242:41761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682366, "uuid": "4b11950d-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.154.131:52233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682366, "uuid": "4b18c917-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.184.72:59540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682394, "uuid": "5bac14ae-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.52:60090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682425, "uuid": "6e35c0f4-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.13.1:49618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682547, "uuid": "b6bb5c4d-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.1.66:36696/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682548, "uuid": "b72145b2-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.231.233:53760/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682610, "uuid": "dc1445be-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.214.13:40296/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682611, "uuid": "dd0a98bc-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.186.247:42517/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682625, "uuid": "e506c9de-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.42.192.116:51868/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682666, "uuid": "fdf802b3-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.19.21:51246/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682726, "uuid": "2132ce26-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.148.42:47744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682726, "uuid": "217f2c57-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.132.128:60080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682728, "uuid": "22be8c7a-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.102.28:55072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682734, "uuid": "25f6c739-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.89:38234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682785, "uuid": "446d32e2-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.161.90:35959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682800, "uuid": "4db44ffb-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.139.69:40027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682908, "uuid": "8e0c9f96-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.82.202:60304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682908, "uuid": "8e2abc03-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.234:57065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682915, "uuid": "923b3814-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.203.69:46171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682965, "uuid": "b0129905-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.175.151:34257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718682966, "uuid": "b07e63e2-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.221.180:53143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683086, "uuid": "f7c750a2-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.245.65:50643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683087, "uuid": "f86e11ae-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.98.183:36474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683145, "uuid": "1b77af9c-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.168:51155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683147, "uuid": "1c16cbb7-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.46.3:57195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683267, "uuid": "6425aa4a-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.133.14:47134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683269, "uuid": "653b18ba-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.248.91.186:42618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683387, "uuid": "ab6b579e-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.233.221:56041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683446, "uuid": "cea8d77f-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.82.202:60304/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683456, "uuid": "d49f4b73-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.78.164:38592/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683461, "uuid": "d7c22385-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.112.139:47123/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683507, "uuid": "f3370427-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.4.121:48477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683510, "uuid": "f4f7f290-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.83.98:37600/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683899, "uuid": "dc641b7b-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.40.29:42925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683926, "uuid": "ecf4f30a-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.196:51323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683931, "uuid": "efa2b36e-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.78.211:44102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683931, "uuid": "efb0ec12-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.166.82:33607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683931, "uuid": "efbc0fca-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.15.194:39237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683932, "uuid": "efffef47-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.130.20:44809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683932, "uuid": "f01b12e6-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.107.60:55234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683934, "uuid": "f136c0aa-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.63.87:54871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683944, "uuid": "f72c046f-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.136.56:41224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683949, "uuid": "fa310c08-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.167.66:52847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683967, "uuid": "04e61687-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.82.141:51998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718683985, "uuid": "0fe05c8c-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.78.211:44102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684046, "uuid": "3462dfe1-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.130.20:44809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684108, "uuid": "592bd656-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.105.191:50808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684167, "uuid": "7c1fdc2e-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.146.27.222/galaxy.arm", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684168, "uuid": "7d36ed6a-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.193:42185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684169, "uuid": "7dd53e81-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.235.94:35857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684170, "uuid": "7e28e5db-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.248.91.186:42618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684174, "uuid": "80778b29-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.158.115:56747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684226, "uuid": "9fc90f50-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.19.21:51246/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684227, "uuid": "a04494f8-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.15.194:39237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684286, "uuid": "c38018a6-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.77:50495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684293, "uuid": "c78b50fe-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.107.60:55234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684346, "uuid": "e6f2f686-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.221.180:53143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684346, "uuid": "e6f857b2-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.234:57065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684352, "uuid": "eaa57f8c-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.8:35960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684356, "uuid": "ecdd11cf-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.56:52551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684409, "uuid": "0cb3d48a-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.172.128.19/NewKindR.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684438, "uuid": "1d97388a-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.136.56:41224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684465, "uuid": "2e20f30a-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.78.205.84:38587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684589, "uuid": "77e5d025-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.93.66:51751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684647, "uuid": "9a9cade8-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.98.183:36474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684715, "uuid": "c2e0b373-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.224.187:38050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684725, "uuid": "c8c84b6e-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.88:47415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684766, "uuid": "e197b038-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.46.3:57195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718684887, "uuid": "295ac3bb-2d2b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.63.169:39950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685133, "uuid": "bc19b3f4-2d2b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.233.221:56041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685248, "uuid": "00f9fc29-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.125.123:41173/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685368, "uuid": "4839945b-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.166.82:33607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685369, "uuid": "48821d16-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.11.70.124:49234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685369, "uuid": "489fc7b6-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.82.141:51998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685493, "uuid": "92f0d077-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.4:51502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685502, "uuid": "97ee81ac-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.111.155:52616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685551, "uuid": "b5366e6c-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.56:52551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685611, "uuid": "d8d88eb0-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.40.29:42925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685847, "uuid": "65a3c741-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.220:59164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685909, "uuid": "8aea94d8-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.158.115:56747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685910, "uuid": "8b89492d-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.228.130:60687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718685911, "uuid": "8bfb25ca-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.2.106.205:48924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686036, "uuid": "d696dc84-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.9.248:39751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686086, "uuid": "f3ece1fe-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.23.37:56626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686086, "uuid": "f4598297-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.93.66:51751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686087, "uuid": "f478fda0-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.67.144:36767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686088, "uuid": "f51b8da1-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.163.240:55717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686146, "uuid": "17d465cb-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.27.4:40267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686175, "uuid": "290fad7d-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.11:51551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686208, "uuid": "3cff068d-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.152:53179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686211, "uuid": "3ef11148-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.220.134:43498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686212, "uuid": "3f32708a-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.47:44522/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686266, "uuid": "5f44b7d9-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.224.187:38050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686266, "uuid": "5f7635f1-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.8:35960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686326, "uuid": "83701961-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.198:43708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686388, "uuid": "a876fff8-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.44.42:52336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686510, "uuid": "f10a909a-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.92.64.169:45067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686757, "uuid": "83ff6536-2d2f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.139.165:34929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686810, "uuid": "a3ccdf7b-2d2f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.87.98:52985/mozi.a", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718686925, "uuid": "e8774ad3-2d2f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.25.237.54:45475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687046, "uuid": "30a55133-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.19.37:52387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687047, "uuid": "310427d9-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.23.138:60000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687048, "uuid": "31aac0c5-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.38.247:51838/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687109, "uuid": "56095e28-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.4:51502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687110, "uuid": "5662b700-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.224.239:55359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687112, "uuid": "57965c24-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.63.91:56927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687116, "uuid": "5a22be6e-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.14:48057/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687117, "uuid": "5ab68e9e-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.194.121:50403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687124, "uuid": "5f110d7f-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.172.22:43508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687286, "uuid": "bf3cdd78-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.69.21:33437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687527, "uuid": "4f3f512d-2d31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.191.97:42055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687530, "uuid": "5092afda-2d31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.213:56301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687645, "uuid": "958d8966-2d31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.67.144:36767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687646, "uuid": "95b72545-2d31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.23.37:56626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687717, "uuid": "c05eb557-2d31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.41.175:50853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687766, "uuid": "dd9f3f6a-2d31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.220.134:43498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687829, "uuid": "0346d45d-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.163.240:55717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687885, "uuid": "24a70244-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.152:53179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687886, "uuid": "251ddf41-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.193.243:60076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687945, "uuid": "4824ea22-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.121.68:39701/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687946, "uuid": "48ceddb5-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.6:47361/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718687947, "uuid": "495a7d26-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.135:50090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688127, "uuid": "b48d61b2-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.30:56509/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688246, "uuid": "fba81449-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.84.207:46303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688307, "uuid": "201e9d83-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.240.196:45599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688308, "uuid": "20ad0fc7-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.139.165:34929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688311, "uuid": "229502fc-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.37.228.21:54978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688426, "uuid": "6724d949-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.187.17:36136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688440, "uuid": "6efb66c3-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.242.107:48160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688458, "uuid": "7a26d046-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.241.211:45000/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688484, "uuid": "89b913ea-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.23.138:60000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688486, "uuid": "8a70f617-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.236.205:38494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688545, "uuid": "ade5de74-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.69.21:33437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688546, "uuid": "ae4abcad-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.122.100:55872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688612, "uuid": "d5f0161e-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.228.191:44351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688614, "uuid": "d705be71-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.86.167:45104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688667, "uuid": "f6ac36f5-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.183.163:55187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688727, "uuid": "1a968182-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.224.239:55359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688847, "uuid": "61c57412-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.181.152:42167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688847, "uuid": "61d1e79a-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.3.226:40461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688847, "uuid": "61ea1630-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.3.122:54119/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688858, "uuid": "686934d0-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.101.17:40750/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718688910, "uuid": "873cc618-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.19.37:52387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689085, "uuid": "efc07574-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.99.68:33963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689213, "uuid": "3bbda964-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.120.130:39937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689267, "uuid": "5c1558f1-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.213:56301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689295, "uuid": "6cdb550c-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.142.86:50979/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689325, "uuid": "7efeef03-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.120.207:49936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689371, "uuid": "99ffb3dd-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.100:52269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689386, "uuid": "a315c3dc-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.215.221.107:46525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689507, "uuid": "eb5b45de-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.49.146:43689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689595, "uuid": "1f713241-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.187.55:59602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689626, "uuid": "320356fd-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.96.189:58608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689628, "uuid": "334d9dec-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.228.191:44351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689654, "uuid": "42f9b229-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.181.174:49157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689685, "uuid": "553637f1-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.193.243:60076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689685, "uuid": "554ce5ec-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.69.22:38087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689686, "uuid": "55ac6f29-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.1.249:45155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689746, "uuid": "799b0205-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.4.135:44195/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689746, "uuid": "79af41e4-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.100.246:45542/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689746, "uuid": "79c2eab6-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.185.26:35497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689808, "uuid": "9eb2f848-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.239.144:43296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689808, "uuid": "9ecdb406-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.219.207:36232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689867, "uuid": "c1ce20f8-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.170.138:47082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718689926, "uuid": "e4d5bef3-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.10.106:44781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690107, "uuid": "50a4ef62-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.162.241:57423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690165, "uuid": "738d381e-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.232.80:47747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690226, "uuid": "97a39ddd-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.51.234:38879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690295, "uuid": "c0efe01a-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.30.86:60826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690301, "uuid": "c49892e0-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.58.98:47731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690347, "uuid": "e0372b0a-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.53.69.57:49110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690467, "uuid": "275443b4-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.122.223:43493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690468, "uuid": "284fe541-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.214.173:40930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690529, "uuid": "4c687064-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.42.153:45898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690586, "uuid": "6e4777da-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.120.130:39937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690662, "uuid": "9bbdfa35-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.8.29:35613/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690665, "uuid": "9db5b293-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.57.207:41052/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690708, "uuid": "b711d727-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.41.161:42793/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718690711, "uuid": "b898393d-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.223.2:33742/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691008, "uuid": "69f76d2c-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.96.189:58608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691028, "uuid": "760eecd6-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.170.210:34356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691066, "uuid": "8c9390a0-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.120.207:49936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691073, "uuid": "90a9d2ae-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.213.42:37535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691125, "uuid": "af9ed5e5-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.49.146:43689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691130, "uuid": "b2a5d120-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.8.175:57161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691131, "uuid": "b32fba9e-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.201:36323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691136, "uuid": "b66c2575-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.171.195:45282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691186, "uuid": "d3e96a0d-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.215.221.107:46525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691246, "uuid": "f7c6ce6c-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.255.72:45815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691251, "uuid": "fa9e77be-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.111:52204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691377, "uuid": "45c75fec-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.19.56:40230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691545, "uuid": "aa461b98-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.12.2:44572/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691546, "uuid": "aa742484-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.10.106:44781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691546, "uuid": "aac9d678-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.19.56:59737/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691550, "uuid": "ad2c8588-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.151:60251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691550, "uuid": "ad30257e-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.242.66:38537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691558, "uuid": "b1866d9f-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.239.157:59277/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691575, "uuid": "bc00ae37-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.220.3:53753/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691609, "uuid": "cfdcb62c-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.24.245:53833/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691667, "uuid": "f2b7b84c-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.9.122.16:54642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691845, "uuid": "5cdfea4c-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.122.223:43493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691845, "uuid": "5d14c82c-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.58.98:47731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691853, "uuid": "61ad43b2-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.100.154:37331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691908, "uuid": "825c55b4-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.51.234:38879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718691909, "uuid": "82de3b08-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.234:53757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692086, "uuid": "ec36df27-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.90.214:43321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692086, "uuid": "eca60e28-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.42.153:45898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692089, "uuid": "ee0aa4f0-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.88.122:43071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692090, "uuid": "eecbd9a1-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.82.251:48714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692274, "uuid": "5c3d9a98-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.214.173:40930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692277, "uuid": "5e2a9caf-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.249.195:39694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692327, "uuid": "7c02fcdf-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.usercontent.google.com/uc?id=1zW3sBV--Iz6j0Jx74SNs4bD1CtrH8TOW&export=download", "Tag": [ { "name": "1234", "colour": "#cfb468", "exportable": true, "hide_tag": false }, { "name": "Password-protected", "colour": "#58d51b", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692329, "uuid": "7d330818-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.213.42:37535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692341, "uuid": "84b8d6df-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.201.75.19:2123/v.jpg", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692341, "uuid": "84ba22a3-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.201.75.19:2123/9.jpg", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692341, "uuid": "84ba241a-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.201.75.19:2123/3.jpg", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692341, "uuid": "84ba89d1-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.117.105:47786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692347, "uuid": "88129ae0-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.170.210:34356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692348, "uuid": "88c24135-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.discordapp.com/attachments/1251449190136021034/1252334924917374976/ArenaWars.rar?ex=6671d749&is=667085c9&hm=1f9333e86625ebb05645dcf91b1a78ae758a4f3b72bbbb4e2cc2137cef5f01f6&", "Tag": [ { "name": "discord", "colour": "#5a4135", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false }, { "name": "pwd-7JKL-2ONE-MNO1", "colour": "#ED2441", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692434, "uuid": "bbd8c16b-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.discordapp.com/attachments/1235979687658782763/1252238274232057876/PetitIsland.rar?ex=66717d46&is=66702bc6&hm=e1b42fc2d08f7912047544f3b17db943dddcc05f2dd7194ea3ed6e22a39cdec0&", "Tag": [ { "name": "discord", "colour": "#5a4135", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false }, { "name": "pwd-beta", "colour": "#04262c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692447, "uuid": "c3d8de78-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.19.56:40230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692450, "uuid": "c5395c33-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.110.173:38428/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692452, "uuid": "c64d9f23-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.23.95:46760/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692510, "uuid": "e8f37f3e-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.201.74.179:2123/ll.jpg", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692510, "uuid": "e8ff5248-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.196.63.241:55809/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692510, "uuid": "e90a6203-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.201.74.179:2123/w.jpg", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692511, "uuid": "e9785381-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.201:36323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692514, "uuid": "eb8d21a8-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.5.228:43526/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692514, "uuid": "ebc01879-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.111.150:51507/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692603, "uuid": "205212d0-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.91.57.240/nanominer.tar.gz", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692633, "uuid": "32734d65-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.11.163:47836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692751, "uuid": "78eed39b-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.233.199:54871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692754, "uuid": "7a5dcc76-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.13.102:56162/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692810, "uuid": "9be5f2c5-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.111:52204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692817, "uuid": "a02c484c-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.108:59579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718692941, "uuid": "ea4cf149-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.100.229:38891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693168, "uuid": "718af475-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.234:53757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693173, "uuid": "74903c53-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.242.210:36743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693292, "uuid": "bb6d9461-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.208.53.15:52937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693346, "uuid": "dbaf614a-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.19:58561/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693347, "uuid": "dc38aa21-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.70:42205/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693348, "uuid": "dcbeb4a6-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.138.97:47140/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693377, "uuid": "edfe7eee-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.13.39:52532/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693412, "uuid": "02f0f809-2d3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.100.154:37331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693713, "uuid": "b5f69b3e-2d3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.25.167:38113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693766, "uuid": "d5f04e84-2d3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.90.214:43321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693771, "uuid": "d900ebeb-2d3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.245.32:51361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718693946, "uuid": "40e62269-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.35.193:48043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694010, "uuid": "6746a356-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.76.87:53528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "8af79736-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "8af9f2e9-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "8b068f10-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694070, "uuid": "8b14070a-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.11.163:47836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694071, "uuid": "8be1abcc-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694071, "uuid": "8be555d3-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8be5f295-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8bf920f1-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8bfb2823-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8c14bd0c-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8c3e54a3-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8c467920-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8c4f4799-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8c5e7952-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694072, "uuid": "8c5f3e50-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694219, "uuid": "e40e898f-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.91.57.240/gost.exe", "Tag": [ { "name": "Gost", "colour": "#9488c2", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694254, "uuid": "f89c98c7-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.48:48441/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694259, "uuid": "fb91b108-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.59.205.135:38674/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694260, "uuid": "fc4666f2-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.7.144:53172/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694264, "uuid": "fe7bec50-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.105.255:52824/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694373, "uuid": "3f829e9b-2d41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.108:59579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694425, "uuid": "5ee31a45-2d41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.195:44372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694426, "uuid": "5f32702e-2d41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.228.89:60195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694487, "uuid": "83c9868c-2d41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.177:43136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694616, "uuid": "d05165e8-2d41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.48:41258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694725, "uuid": "11a9a3c0-2d42-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.8.8:57270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694726, "uuid": "11f084e4-2d42-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.123.216.47:52201/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694728, "uuid": "136054cb-2d42-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.44.161:44082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694790, "uuid": "383d156c-2d42-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.149.199:58570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718694971, "uuid": "a44c7717-2d42-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.57.156:54010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695146, "uuid": "0c4b2ecb-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.86.216:60596/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695164, "uuid": "16ce3627-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.255.190:59113/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695208, "uuid": "314d83e8-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.25.167:38113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695208, "uuid": "314efbcb-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.138.97:47140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695209, "uuid": "31b24673-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.193:42185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695403, "uuid": "a56cbc08-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.92.253:39263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695406, "uuid": "a726c3de-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.111.46:42952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695506, "uuid": "e2df341a-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/r", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695506, "uuid": "e2e7dffd-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.37/y", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695509, "uuid": "e4adaa76-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.84.0:34006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695517, "uuid": "e92f94e9-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.19.215.228:8081/127pos.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695517, "uuid": "e994b721-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.87.13:37527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695518, "uuid": "ea35912e-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.19.215.228:8081/Radmin2018.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695523, "uuid": "ed0f8343-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.19.215.228:8081/Aripzlzup.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695566, "uuid": "06aa8b4b-2d44-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.146.27.222/galaxy.arm7", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695567, "uuid": "07108e69-2d44-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.184.243:35891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695872, "uuid": "bcfdd2e2-2d44-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.6.103:41564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718695988, "uuid": "025b41f6-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.41.161:42793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696048, "uuid": "261a416f-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.97:44034/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696048, "uuid": "261ca654-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.199.7:33271/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696062, "uuid": "2e120087-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.140.91:41313/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696128, "uuid": "557dd77a-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.82.148:58456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696165, "uuid": "6be8358d-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.195:44372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696288, "uuid": "b4cb1649-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.184:59136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696424, "uuid": "05e0d64d-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.30.5:42233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696430, "uuid": "09754e28-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.25.240:46074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696526, "uuid": "42d69862-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.44.161:44082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696591, "uuid": "69876d17-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.223.132.217:60455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696645, "uuid": "899a1446-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.103:34847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696650, "uuid": "8d08f691-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.162.191:39404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696662, "uuid": "941c17f0-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.65:37831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696716, "uuid": "b45083ee-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.63.149:47708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696770, "uuid": "d4592e48-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.57.254:44631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696786, "uuid": "de1ba4fc-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.241.241:43005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696832, "uuid": "f972ba23-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.7.19:41981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696893, "uuid": "1dac0f61-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.61.212:35947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696945, "uuid": "3c69ffc1-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:40741/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696945, "uuid": "3cdf8c30-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.125.195:35694/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696952, "uuid": "40ef3f0c-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.168.31.87:34646/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696953, "uuid": "415ed574-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.93.214:43133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696954, "uuid": "41dc56df-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.139.93:47088/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696959, "uuid": "44c11bcf-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.185.34:42185/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718696960, "uuid": "4569cdf5-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.14.218:34956/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697011, "uuid": "641e6d58-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.91.23:59544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697133, "uuid": "ac6887a0-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.59.251:55841/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697308, "uuid": "14d5c4ec-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.220:56608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697328, "uuid": "20fb3d1d-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.219.52:36563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697368, "uuid": "38982f61-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.231:40142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697435, "uuid": "60c93d72-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.204.126:39312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697488, "uuid": "800b6ec3-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.230.59:52471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697555, "uuid": "a7fe7964-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.198.57:50583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697562, "uuid": "ac2a55e0-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.187.213:39510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697609, "uuid": "c89c109b-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.122.50.208/one.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697610, "uuid": "c8b67839-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/Sakura.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697610, "uuid": "c8f607b8-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.110.49.232/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697614, "uuid": "cb700541-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.208.112:48863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697617, "uuid": "cd3895a4-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.158.86.16:2266/AV520.exe", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697699, "uuid": "fe3d2d19-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.193.75:43442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697785, "uuid": "317f4013-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.82.148:58456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697802, "uuid": "3b5d5ad3-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.133.28:40143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697848, "uuid": "56ea9526-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.2.57:55041/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697852, "uuid": "597366ad-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.2.187:49610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697924, "uuid": "84367ee3-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.130.157:39928/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697970, "uuid": "9f77e6dd-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.248.248.135:7744/lvse.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697970, "uuid": "9f862fba-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.248.248.135:7744/1019430.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "a11f56f4-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.248.248.135:7744/mimikatz_trunk.zip", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "a12ee4ba-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.248.248.135:7744/1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697973, "uuid": "a14728c1-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.248.248.135:7744/mz64.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697974, "uuid": "a200aa69-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.18.241:38527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697990, "uuid": "ab85e391-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.248.248.135:7744/ewwe.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697995, "uuid": "ae4913c1-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.122.50.208/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697995, "uuid": "ae49144d-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.122.50.208/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697995, "uuid": "ae491712-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.122.50.208/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697995, "uuid": "ae49259c-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.122.50.208/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697995, "uuid": "ae4be39c-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.122.50.208/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718697995, "uuid": "ae4d7806-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.122.50.208/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698097, "uuid": "eb203921-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.77.158.21:1990/%E7%BB%88%E6%9E%81%E5%A4%8D%E5%8F%A4.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698146, "uuid": "08c1f158-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.215.163:48029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698147, "uuid": "08d024fe-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.31:53521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698147, "uuid": "0947fa04-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/x-8.6-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698147, "uuid": "095929b2-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/x-3.2-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "099378e5-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/i-5.8-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "099551e4-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/a-r.m-7.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "09a1161d-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/m-i.p-s.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "09a805ec-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/s-h.4-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "09adca69-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/m-p.s-l.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "09b5219e-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/a-r.m-4.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "09ca807f-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/a-r.m-5.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "09cec178-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.138.87:44706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "09d50da8-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/p-p.c-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698148, "uuid": "09dcfa4b-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.51.29/a-r.m-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698210, "uuid": "2eae0095-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.93.214:43133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698215, "uuid": "31979d19-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.26.54:40169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698270, "uuid": "5256d57b-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.182.254:39613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698510, "uuid": "e128b09d-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.65:37831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698513, "uuid": "e306941b-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.219.152:47481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698530, "uuid": "ed2b3a62-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.244.218:33962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698567, "uuid": "03414f83-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.63.149:47708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698571, "uuid": "05a0522a-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.243.124:39015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698572, "uuid": "066d5bb4-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.89.136:39746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698626, "uuid": "26a7d06f-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.57.254:44631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698686, "uuid": "4a15f837-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.91.23:59544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698690, "uuid": "4ce1bebd-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.181.6:36909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698691, "uuid": "4d4389dd-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.16:44266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698746, "uuid": "6e4b6f6e-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.16:59031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698751, "uuid": "7164bc22-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.18:54480/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698753, "uuid": "723ed1d3-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.56.26:50623/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698760, "uuid": "76351033-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.27.108:39554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698809, "uuid": "93cec185-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.208.112:48863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698809, "uuid": "93e5acc0-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.230.59:52471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698867, "uuid": "b5f18b92-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.204.126:39312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698986, "uuid": "fd1d60ab-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.20:35885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698989, "uuid": "feec41da-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.155.99:57045/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718698996, "uuid": "02ff9f64-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.164.72:57979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699107, "uuid": "4535b9bc-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.254.133:44919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699107, "uuid": "455afc83-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.144.78:52773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699112, "uuid": "4802f012-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.243.180:46291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699112, "uuid": "4837bdfc-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.99.94:41250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699164, "uuid": "6771c210-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:40741/mozi.a", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699416, "uuid": "fd5eedc5-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.100.246:45542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699419, "uuid": "ff7610bc-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.2.187:49610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699473, "uuid": "1f7e0c6b-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.84.60:58466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699648, "uuid": "87dc615a-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.78.19:35445/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699648, "uuid": "87f11ddf-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.166.189:54105/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699648, "uuid": "87f66cca-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.42.200.58:37235/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699654, "uuid": "8b107458-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.83.50:56151/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699771, "uuid": "d0d54e1d-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.82.76:39372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699833, "uuid": "f5d07191-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.221.188:39810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718699947, "uuid": "39dbf515-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.27.108:39554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700011, "uuid": "5fd58bdf-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.30.5:42233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700067, "uuid": "81c08ed1-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.76.134:48671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700128, "uuid": "a5991ff5-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.164.187:40024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700128, "uuid": "a5b8d7b8-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.221:53645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700130, "uuid": "a708261e-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.219.219:59914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700185, "uuid": "c80902d2-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.20:35885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700185, "uuid": "c81acbe0-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.73.9:33432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700188, "uuid": "c9b9ee44-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.231.82:50272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700368, "uuid": "34c713e7-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.24.5:53289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700368, "uuid": "34fddbcf-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.244:47143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700427, "uuid": "583960a7-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.122.61:40159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700547, "uuid": "9f4c74f6-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.16:59031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700547, "uuid": "9f9bd490-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.78.225:52199/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700547, "uuid": "9fb9b26d-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.75.114.108:53025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700548, "uuid": "a06aa6ba-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.95.11.32:45843/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700567, "uuid": "ab96440e-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.72.115:54085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700610, "uuid": "c546b861-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc196435730_675375683?hash=g8Cv8Af6Er9wFJzG7XJPW2153xtgZSXGMsBo0v0oGc0&dl=5UT9CLTZFzpzWP7bsvtRKSuGVpdb3dTMz38IgGl7XGz&api=1&no_preview=1#mene", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700613, "uuid": "c6c826cc-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.222.139:41375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700622, "uuid": "cc43924b-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.21:33942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700726, "uuid": "0a5978fe-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.254.133:44919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700726, "uuid": "0a6a694f-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.188.27:53092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700920, "uuid": "7df952fa-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.144.183:52827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700927, "uuid": "81d677b9-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.115.176:35200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718700967, "uuid": "99c3ae21-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.24.5:53289/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701054, "uuid": "cdb2bcb9-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.255.74:33368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701212, "uuid": "2c018136-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.28.155:49594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701214, "uuid": "2d0f043f-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.46:59969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701270, "uuid": "4e98a604-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.233.92:36022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701270, "uuid": "4ed3bc6f-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.221.188:39810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701385, "uuid": "93254a5f-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.69:48605/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701389, "uuid": "95b03a81-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.7.115:48145/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701391, "uuid": "968fda36-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.172.21:41262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701394, "uuid": "9873d384-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.252.69.131:59950/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701419, "uuid": "a798edfc-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.110.236.162:60286/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701447, "uuid": "b8383e97-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.199.94:39550/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701449, "uuid": "b955936d-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.239.136:37038/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701453, "uuid": "bbac2d40-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.27.93:59731/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701518, "uuid": "e27f39af-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.189:39622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701687, "uuid": "4739522c-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.76.134:48671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701698, "uuid": "4d6a8ab8-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.41.66:58841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701702, "uuid": "4fed6e72-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.190.22:51238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701810, "uuid": "904ec691-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.187.118:55486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701810, "uuid": "90616a2a-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.4.127:49059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701810, "uuid": "907764a0-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.221:53645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701818, "uuid": "954ed3d2-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.17.112.189:48341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718701925, "uuid": "d4cd833a-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.121.46:44324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702050, "uuid": "1f87fe3c-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.212.88:41534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702055, "uuid": "22633463-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.136.181:47008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702171, "uuid": "67843381-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.136:39587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702174, "uuid": "6936a34b-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.181:50617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702225, "uuid": "87c628c9-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.75.114.108:53025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702226, "uuid": "8863e874-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.41.66:58841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702228, "uuid": "898bc8f3-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.135.107:57998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702285, "uuid": "ab688c89-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.121.253:42178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702285, "uuid": "ab7a401a-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.233.92:36022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702286, "uuid": "ac0f8db1-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.21:33942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702290, "uuid": "ae85fa43-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.70.71:56664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702290, "uuid": "aeb79189-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.90.63:33679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702295, "uuid": "b1570991-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.47.192:39239/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702346, "uuid": "d01fa1f4-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.99.94:41250/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702352, "uuid": "d37d5fd9-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.6.238:55861/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702352, "uuid": "d3973b99-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.47.71:51394/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702414, "uuid": "f898d0c6-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.3.56:37019/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702427, "uuid": "00462cd8-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.23.93:46581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702465, "uuid": "16a9c632-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.52.90:50980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702646, "uuid": "82c015ad-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.144.183:52827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702661, "uuid": "8b855c75-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.115.176:35200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702708, "uuid": "a7db6fdd-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.255.74:33368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702770, "uuid": "cccb4ea1-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.107.48:41752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702827, "uuid": "eedbd266-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.248.248.135:7744/princeharry.zip", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702828, "uuid": "eef1e1a1-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/ceshi.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702831, "uuid": "f11a1664-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.19.217.34:8081/127pos.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702832, "uuid": "f16ae6f9-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.19.217.34:8081/Aripzlzup.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702832, "uuid": "f17725ba-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.27.165.132/upload/Phija.7z", "Tag": [ { "name": "7zip", "colour": "#0b8d16", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702837, "uuid": "f4d69389-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/22222.zip", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702899, "uuid": "19809ec7-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/c3p.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702945, "uuid": "352a19af-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.120.5:51602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702946, "uuid": "35b6713c-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.253.244:40781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702948, "uuid": "36d86f2f-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.233.46:38533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702950, "uuid": "38128fc1-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.102.28:55072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718702955, "uuid": "3aa0be35-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.39:59555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703017, "uuid": "5fe75521-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.28.155:49594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703070, "uuid": "7f440b20-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.189:39622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703071, "uuid": "80032929-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/DHL.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Redosdru", "colour": "#971e8d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703071, "uuid": "801275ef-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/conhostdhfw.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "Redosdru", "colour": "#971e8d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703097, "uuid": "8f57c55b-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/dd.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703128, "uuid": "a23561cd-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.187.118:55486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703247, "uuid": "e8e8642d-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.29.27:57504/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703247, "uuid": "e8f5c7dd-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.126.86:44924/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703313, "uuid": "0ffaf5aa-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.17.112.189:48341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703368, "uuid": "30c28f28-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.183.163:55187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703443, "uuid": "5dc6d818-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.238.118:60149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703485, "uuid": "76c399cf-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.111.150:51507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703575, "uuid": "acb6d85e-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.188.27:53092/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703608, "uuid": "bffe59cc-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.153.148.29:53648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703608, "uuid": "c0621897-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.136:39587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703609, "uuid": "c0e530d7-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.40:35369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703725, "uuid": "05fa68aa-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.31.187/psrBtPek113.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703726, "uuid": "06b03aa1-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.31.187/Feyenoords.deploy", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703731, "uuid": "091eb000-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.12.227:40674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703736, "uuid": "0c966f95-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/libcurllvse.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "0cb6a9cd-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/mimikatz_trunk.zip", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "0cbc46f7-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/sky.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703737, "uuid": "0ce069dc-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/mm.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703780, "uuid": "26dfc9b0-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.168.120:7744/has.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703785, "uuid": "298d7e40-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.31.187/Outguns.sea", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703786, "uuid": "2a128b13-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://atsegypt.com/wDWPJlb115.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703845, "uuid": "4d514177-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.121.253:42178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703845, "uuid": "4da1177f-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.212.88:41534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718703909, "uuid": "733514d8-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.181:50617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704085, "uuid": "dc9b14b2-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.52.90:50980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704145, "uuid": "00602901-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.253.244:40781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704146, "uuid": "00cf0646-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.23.93:46581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704146, "uuid": "00e1c051-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.188:39159/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704146, "uuid": "00f1fa27-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.47.192:39239/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704146, "uuid": "0107e698-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.57.112:35411/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704151, "uuid": "037306db-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.11.229:40276/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704158, "uuid": "08258421-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.18.58:39029/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704210, "uuid": "26e3d51c-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.249:45988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704281, "uuid": "5111a4c5-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.255.244:58240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704336, "uuid": "723d8e7a-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.247.5:39086/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704406, "uuid": "9b8ecb0c-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.100.208:58801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704686, "uuid": "4259a722-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.233.46:38533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704686, "uuid": "425e9761-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.120.5:51602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704686, "uuid": "42df46a4-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.46:59969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704687, "uuid": "43153e22-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.180.192:41548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704746, "uuid": "664a0fa1-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.177.96.20:34145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704811, "uuid": "8cd71e11-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.103:56982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704867, "uuid": "ae8efa40-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.111.150:51507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704927, "uuid": "d24c90f0-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.238.30:49025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718704958, "uuid": "e4d69d1e-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.139.168:46573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705048, "uuid": "1a1c1a6f-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.135.209:43788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705050, "uuid": "1bbe40d5-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.55.75.253:16197/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705065, "uuid": "2441f2d1-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.37.101:52135/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705107, "uuid": "3ddc2660-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.153.148.29:53648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705110, "uuid": "3f787869-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.172.127:37433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705111, "uuid": "3fc45347-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.159.240:50989/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705226, "uuid": "844aa6c2-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.233:41518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705285, "uuid": "a7d1dc46-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.243.246:41908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705302, "uuid": "b1fac806-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.133.28:52453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705344, "uuid": "cb0fac37-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.207:53692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705345, "uuid": "cb43555d-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.100.151:48410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705346, "uuid": "cc3043c9-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.9.72:35269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705410, "uuid": "f1e01ef5-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.177.96.20:34145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705415, "uuid": "f4edc41a-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.156.230:37514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705415, "uuid": "f5313921-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.57.157:48466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705526, "uuid": "37326ea7-2d5b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.12.227:40674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705532, "uuid": "3ab7a694-2d5b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.39.6:48880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705710, "uuid": "a4f2245c-2d5b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.249:45988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705715, "uuid": "a8385469-2d5b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.238.240:59613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705885, "uuid": "0d76dbad-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.80:43981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705887, "uuid": "0e73b5a5-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.9.165:39879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705946, "uuid": "315c742a-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.170.238:43089/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705946, "uuid": "31a7d87f-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.234.242:43912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705948, "uuid": "3302f0c6-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.145.68:51830/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705950, "uuid": "340bf1e2-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.61.34:47357/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705951, "uuid": "34831028-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.169.118:52422/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718705963, "uuid": "3b8985c0-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.30.96:43947/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706012, "uuid": "58daeb08-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.242.131:49815/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706015, "uuid": "5a9d3918-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.2.105.207:37042/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706069, "uuid": "7b27172a-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://filetransfer.io/data-package/hnVkhcTO/download", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "config", "colour": "#10580c", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706188, "uuid": "c1fb9f0d-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.178.7.94:60120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706246, "uuid": "e43ea9d2-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.207:53692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706308, "uuid": "0948074a-2d5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.57.157:48466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706366, "uuid": "2be18a91-2d5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.180.192:41548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706366, "uuid": "2bf16b5d-2d5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.29.27:57504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706385, "uuid": "37641d7d-2d5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.254.92:37104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706545, "uuid": "96c39aa6-2d5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.103:56982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706611, "uuid": "bdd7d9c6-2d5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.241.102:57827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706727, "uuid": "036a15eb-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.135.209:43788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706848, "uuid": "4b4f056c-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.79:43321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706849, "uuid": "4bc0dc6b-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.190.231:35645/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706851, "uuid": "4d1c4de6-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.216.22:44563/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706859, "uuid": "51ab5ca9-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.67.147:57711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718706859, "uuid": "51d8666a-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.252:38626/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707026, "uuid": "b564ed5e-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.249.124:48286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707085, "uuid": "d8aaf109-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.11:59793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707086, "uuid": "d8dd652c-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.155.47:42461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707086, "uuid": "d963add4-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.72.194:52313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707146, "uuid": "fc9d2044-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.156.230:37514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707146, "uuid": "fcb8370d-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.9.72:35269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707209, "uuid": "2289b327-2d5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.221:50530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707210, "uuid": "22f1a8c2-2d5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.212.105:38241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707214, "uuid": "25650e6c-2d5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.50.213:54272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707446, "uuid": "afbbbb86-2d5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.238.240:59613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707509, "uuid": "d55a390a-2d5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.238.30:49025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707626, "uuid": "1ac476e8-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.23.95:46760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707626, "uuid": "1b18228d-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.234.242:43912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707635, "uuid": "201754e0-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.243.8:35602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707747, "uuid": "6352c4cd-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.13.181:53050/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707747, "uuid": "635fc0af-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.245.111:45927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707754, "uuid": "676d23b6-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.73.117:50924/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707760, "uuid": "6ae65142-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.64.242:56704/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707810, "uuid": "887c40f5-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.241.102:57827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707812, "uuid": "89e53666-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.9.165:39879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707813, "uuid": "8a7962e2-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.149.63:44142/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707814, "uuid": "8b4ad1fc-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.133.216:57343/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718707927, "uuid": "ce2e278e-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.145.142:39844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708113, "uuid": "3d5b8542-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.201.165:50487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708136, "uuid": "4abb224e-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.248.75:58147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708346, "uuid": "c8732566-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.90:41546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708424, "uuid": "f6b201f1-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.132.163:40866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708447, "uuid": "044a1820-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.145.57:48162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708467, "uuid": "106c261e-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.249.124:48286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708468, "uuid": "10e2ab10-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.186.37:51718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708528, "uuid": "345d43b4-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc196435730_675381106?hash=8yhPrbZ9GmznjQWEdQcormrlYL034TKp4WDeAvHhkxH&dl=6n5dHgQgHkdixaHpQ1TUS72cnFzP4MhhlaONfLaBE4T&api=1&no_preview=1#1", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708585, "uuid": "56e04b7c-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.155.47:42461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708602, "uuid": "60b8bff4-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.51:40585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708647, "uuid": "7b909be4-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.52:58621/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708647, "uuid": "7bb559af-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.2.92:43779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708647, "uuid": "7bb74684-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.72.194:52313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708649, "uuid": "7ccafd7d-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.73.213:51889/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708658, "uuid": "8264f50e-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.78.123:47630/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708669, "uuid": "88a25746-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.250.80:46977/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708688, "uuid": "94194744-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.135.2:37782/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708711, "uuid": "a1cb4b03-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.170.197:36925/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708766, "uuid": "c27ef812-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.210.220:46061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718708767, "uuid": "c346a7ed-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.212.105:38241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709069, "uuid": "773ba8db-2d63-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.50.213:54272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709309, "uuid": "064a43f1-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.229.228:41556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709426, "uuid": "4c29c9f8-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.90.42:43795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709427, "uuid": "4c7ee56e-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.66:60421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709486, "uuid": "6f699135-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.145.142:39844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709490, "uuid": "72377dc9-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.121:45958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709498, "uuid": "770a1ecc-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.136.174.2/2345.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709501, "uuid": "7882616a-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.89.91.95/2345.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709559, "uuid": "9ae0bb4e-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.224.227:55281/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709574, "uuid": "a44086ba-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.87.98:52985/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709596, "uuid": "b0f6ce5c-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.145.57:48162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709609, "uuid": "b8dd638d-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.138.241:41464/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709624, "uuid": "c1c1a641-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.176.148:37579/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709629, "uuid": "c52569a4-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.134.238:44684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709729, "uuid": "00525ea4-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.222.147:51011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709786, "uuid": "2255cf21-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.183.77:41990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709846, "uuid": "46642204-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.7.97:37679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709879, "uuid": "59d4c3b3-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.144.167:43523/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709908, "uuid": "6b309383-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.186.37:51718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709909, "uuid": "6bb45fc9-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.90:41546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709966, "uuid": "8e06fdb0-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.248.75:58147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718709968, "uuid": "8f148716-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.230.11:56897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710149, "uuid": "faf5a2f2-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.95.186:42126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710150, "uuid": "fb388fd3-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.132.163:40866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710215, "uuid": "220039a0-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.216.150:40290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710218, "uuid": "23ae13a0-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.1.230:53215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710387, "uuid": "88e93446-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.2.92:43779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710447, "uuid": "acb55088-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.60:56407/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710511, "uuid": "d266eed0-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.122.14:45032/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710511, "uuid": "d27d8de7-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.57:34170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710516, "uuid": "d55a82b9-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.5.192:33212/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710584, "uuid": "fe10e961-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.232.119:35776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710628, "uuid": "18734bde-2d67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.136.181:47008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710761, "uuid": "67b3ed99-2d67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.133.2:43685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710808, "uuid": "83e92033-2d67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.229.228:41556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710868, "uuid": "a74c484b-2d67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.144.167:43523/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710927, "uuid": "ca4ac1da-2d67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.1.230:53215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718710930, "uuid": "cc58418a-2d67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.209.116:39823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711045, "uuid": "10b88e9c-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.121:45958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711045, "uuid": "10e98f81-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.66:60421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711173, "uuid": "5d75dfac-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://o7labs.top/visual/blob.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711196, "uuid": "6add71bd-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://o7labs.top/visual/bin.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711226, "uuid": "7cafed75-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.183.77:41990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711285, "uuid": "a00fd3d2-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.57:34170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711286, "uuid": "a04b563d-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.253.182:33119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711347, "uuid": "c4f09ffb-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.162.219:33392/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711348, "uuid": "c56d9d5b-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.45.195:35174/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711360, "uuid": "ccdb79c4-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.182.122:51493/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711412, "uuid": "eb61e5f2-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.44:38532/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711422, "uuid": "f15e326c-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.123.182:38081/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711600, "uuid": "5bf9a7e4-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.235.46:37782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711646, "uuid": "76e50a60-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.230.11:56897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711661, "uuid": "804d3737-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.146.212:43345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711710, "uuid": "9d0c9f26-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.210:33686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711766, "uuid": "be6ed646-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.17.181:44476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711766, "uuid": "be7a8b13-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.50.60:42332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711766, "uuid": "be7c7488-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.64:14832/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711946, "uuid": "29cfb185-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.102.157:48996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718711957, "uuid": "305f7897-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.39.240:54838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712010, "uuid": "50455c0f-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.40:35369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712246, "uuid": "dca48b28-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.12.159:34275/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712247, "uuid": "dd360531-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.238:50495/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712309, "uuid": "02397937-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.200.86:56681/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712309, "uuid": "024b1518-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.204.76:50480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712313, "uuid": "046d7d09-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.139:44892/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712326, "uuid": "0c8b6bcc-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.17.171:44001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712440, "uuid": "505ec3ee-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.47.97:47388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712486, "uuid": "6b9a6006-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.253.182:33119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712551, "uuid": "928dd461-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.159.173.213:37100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712551, "uuid": "92a07d3b-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.74.185.5/3R%BC%BC%CA%F5.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712559, "uuid": "97670874-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.74.185.5/%C4%A7%BE%A7.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712616, "uuid": "b946a7e6-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.227:45798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712619, "uuid": "bb130285-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.121.209:38502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712727, "uuid": "fbab3a4e-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.209.116:39823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712730, "uuid": "fd30e69e-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.107.188:38304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712911, "uuid": "690c1a11-2d6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.89.136:39746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718712912, "uuid": "69f4fc25-2d6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.235.46:37782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713094, "uuid": "d60cb319-2d6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.18.16:44043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713151, "uuid": "f80e75d6-2d6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.229.39:57472/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713151, "uuid": "f8195d29-2d6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.13.63:40871/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713210, "uuid": "1b66fd41-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://server.kovey-net.ru/V8thsLW8/Tig5ua64", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713215, "uuid": "1e887484-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.145.142:54331/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713216, "uuid": "1ec0d20d-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.132.221:54240/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713232, "uuid": "285615e9-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.216.77:59152/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713268, "uuid": "3e003ea1-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.210:33686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713273, "uuid": "410fc99b-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.166:45096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713446, "uuid": "a8107b5d-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.102.157:48996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713446, "uuid": "a831e305-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.17.181:44476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713524, "uuid": "d68bf9a2-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.50.60:42332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713876, "uuid": "a827d41e-2d6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.13.192:39519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718713878, "uuid": "a9c44ebd-2d6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.189.123:51568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714048, "uuid": "0f03dbc9-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.204.76:50480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714049, "uuid": "0f3aef05-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.252.141.203:47229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714049, "uuid": "0f60222f-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.67.128:36710/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714053, "uuid": "11aec821-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.109:57381/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714110, "uuid": "33ce2cb6-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.121.209:38502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714169, "uuid": "5700cc38-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.159.173.213:37100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714296, "uuid": "a2d0b553-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.13.235:33592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714345, "uuid": "bfa9d6ce-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.107.188:38304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714345, "uuid": "c00f6f1c-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.227:45798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714615, "uuid": "60e2e503-2d70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.15.121:33292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714712, "uuid": "9ac6c231-2d70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.44.177:57736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714765, "uuid": "ba54aaba-2d70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.233.161.89:40146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714766, "uuid": "ba82f744-2d70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.70.224:45336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714825, "uuid": "de16e2c5-2d70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.247.231:41302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714896, "uuid": "0856489b-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.31.214:59218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718714949, "uuid": "2795d3fa-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.226:45917/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715018, "uuid": "5117a2aa-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.85.75:40918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715039, "uuid": "5d62609f-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.248.80:50644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715127, "uuid": "91c2a1ce-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.13.235:33592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715309, "uuid": "fe9d3317-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.34.146:58665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715367, "uuid": "21134943-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.126.82:51665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715375, "uuid": "258a29c6-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.174.75:33771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715545, "uuid": "8b1f667c-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.172.155:47524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715610, "uuid": "b2222c70-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://server.kovey-net.ru/V8thsLW8/Tigua64", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715846, "uuid": "3e8e489d-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.215.11/zoom/jun17.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#337cec", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715846, "uuid": "3e924ec0-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.215.11/zoom/wp.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715846, "uuid": "3eceb8f2-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.215.11/zoom/adobex.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715847, "uuid": "3f0c6917-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.64.89:58100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715847, "uuid": "3f57990b-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.44.117:58498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715848, "uuid": "3f828461-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.176.107:45221/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715848, "uuid": "3fb42945-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.147.22:60391/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715857, "uuid": "4518892b-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.79.1:45616/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718715909, "uuid": "63d1df4a-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.215.11/zoom/Output.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716087, "uuid": "cde88bf5-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.221.45.170:60895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716133, "uuid": "e9670025-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.27.205:44730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716209, "uuid": "172874ca-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.181.249:38978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716266, "uuid": "389296b7-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.77.77:58029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716273, "uuid": "3d42b0ab-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.172:51670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716330, "uuid": "5f141cd8-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.211.49:57692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716349, "uuid": "6a46b468-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.24.1:42634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716447, "uuid": "a47bc50a-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.44.177:57736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716447, "uuid": "a485890e-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.10.105:60622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716509, "uuid": "c9f74b7a-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.248.80:50644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716753, "uuid": "5aef6c32-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.118:33809/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716764, "uuid": "61918491-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.90.35:55667/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716808, "uuid": "7babe12b-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.172.155:47524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716813, "uuid": "7ef5b2ce-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.138.186:42604/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716926, "uuid": "c25c121d-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.56.26:50623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716931, "uuid": "c55295a8-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.90.56:56363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716932, "uuid": "c594e1a7-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.94.58:58682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718716998, "uuid": "ecf6f7b7-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.229.133:54254/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717046, "uuid": "09bc5923-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.130.230:46101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717050, "uuid": "0c60ba54-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.219.172.220:13856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717108, "uuid": "2ee29a07-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.42.38:43180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717165, "uuid": "50e65808-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.126.82:51665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717172, "uuid": "54df594a-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.17.255:36835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717413, "uuid": "e459245a-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.73.78:37878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717472, "uuid": "07fa59aa-2d77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.231.225:35383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717474, "uuid": "08a7be3d-2d77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.44.117:58498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717528, "uuid": "28e85fa6-2d77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.181.249:38978/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717539, "uuid": "2f6aed71-2d77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.116.189:39176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717648, "uuid": "706d2cb4-2d77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.144.170:39410/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717711, "uuid": "9642c371-2d77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.221.45.170:60895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717768, "uuid": "b84f4867-2d77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.211.49:57692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718717947, "uuid": "22b0f1ea-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.170.123:55261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718009, "uuid": "478b005d-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.24.1:42634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718066, "uuid": "69a8c087-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.77.77:58029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718066, "uuid": "69e64218-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.10.105:60622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718125, "uuid": "8d21ea3d-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.33.98:42156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718245, "uuid": "d4607f5b-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.244.36.221/arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718310, "uuid": "faf6c57b-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc196435730_675386512?hash=N07EodRpPsMWlBBr0bovnjj7b9y5vzBlRCoGAkJ2lfX&dl=Pu5zDof43IXvGUg9u9SekkwEaxYU91m7maUNahfbLB0&api=1&no_preview=1#allien", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718310, "uuid": "faff776a-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.116.123:50137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718366, "uuid": "1c5520db-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/wa622T", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718366, "uuid": "1c5d7d56-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.235.39.109/3090/imagescomewithnewpicturesaround.bmp", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718367, "uuid": "1cfd6a10-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.235.39.109/3090/fco/bbc.doc", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718367, "uuid": "1d18ac31-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.64.89:58100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718368, "uuid": "1dac262b-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.124.107.228/708900/imageupdatedsuccessfullypicture.bmp", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718371, "uuid": "1fc1a36c-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.124.107.228/708900/rgs/bbc.doc", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718427, "uuid": "40bc5df9-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.135.155/xampp/ujhk/InetCache.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718427, "uuid": "410cf860-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/cLV0X", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718430, "uuid": "42e7138d-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.135.155/M1706T/csrss.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718432, "uuid": "439d41cd-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.179.35:55786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718486, "uuid": "64527558-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.90.56:56363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718487, "uuid": "645ef9ea-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.127:40670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718489, "uuid": "65971bcd-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.165.199:53229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718491, "uuid": "6716a1dd-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.193:42008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718545, "uuid": "8764ec93-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.195:44372/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718546, "uuid": "87b37751-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.4.62:34568/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718553, "uuid": "8c1ecbf2-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.32.178:35403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718566, "uuid": "93f74594-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.142:33097/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718667, "uuid": "cfac5042-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.6.205.2:56635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718726, "uuid": "f3192690-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.182.58:57639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718785, "uuid": "16567313-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.231.225:35383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718787, "uuid": "175b34df-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.149:33052/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718846, "uuid": "3aa13137-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.135.56:34948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718849, "uuid": "3c69bf68-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.17.255:36835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718718917, "uuid": "64d4f502-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.75.86:43723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719027, "uuid": "a6975b4a-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.104.208:41848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719086, "uuid": "c99e0608-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.237.202:41023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719209, "uuid": "133a716d-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.253.113:53640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719270, "uuid": "378403dd-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.35:40229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719386, "uuid": "7cbb6946-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.158.161:36214/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719446, "uuid": "a020a412-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.135.145:43241/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719510, "uuid": "c6628767-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.101.0:43954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719568, "uuid": "e8ff753a-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.170.123:55261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719706, "uuid": "3b1f8ddc-2d7c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.86.41:55273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719810, "uuid": "78f22ed0-2d7c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.33.98:42156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719810, "uuid": "793d2c7b-2d7c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.32.178:35403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718719932, "uuid": "c1b47bfa-2d7c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.230:41384/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720047, "uuid": "06c5e05a-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.193:42008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720048, "uuid": "0707f941-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc196435730_675386549?hash=XCpa7BUy6uZ1FidyDdy4rLLZmuK9JC5cbdPbqZkhgTP&dl=Lx0jwHtyMWR4IUD5McUqC38mMclODSItDzbXKHvXTso&api=1&no_preview=1#vasi", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720050, "uuid": "08861bdb-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.179.35:55786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720112, "uuid": "2cf9a049-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc196435730_675386451?hash=hcjeFOa32ieZdZdRu9sCvz3GuOSzfo41LKwqk2RxlB4&dl=e0f3ZsBI4zO4s6hlktH8vfaNeyiiGg9Igjsjq10HLhP&api=1&no_preview=1#mene", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720166, "uuid": "4dafb269-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.135.56:34948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720229, "uuid": "73097bda-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.244:40643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720231, "uuid": "74489362-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.166.82:35059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720277, "uuid": "8f6d3f73-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.218.106:35839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720286, "uuid": "9522df67-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.182.58:57639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720348, "uuid": "b9daf333-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.192.248:53101/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720412, "uuid": "e01a55fa-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.207:40099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720415, "uuid": "e1db6d78-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.121.76:40645/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720526, "uuid": "23f84a18-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.149:33052/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720646, "uuid": "6b550659-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.127:40670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720649, "uuid": "6d1c32fc-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.75.86:43723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720766, "uuid": "b33f0244-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.104.208:41848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720767, "uuid": "b3902655-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.172.81:45503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720771, "uuid": "b5d60716-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.228:37455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720885, "uuid": "fa265e7f-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.35:40229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720900, "uuid": "02d50fee-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.70.113:35770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720946, "uuid": "1e2d08fa-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.253.113:53640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718720953, "uuid": "22cb982f-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.174.212:38766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721014, "uuid": "46e3076e-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.143.241:57083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721073, "uuid": "6a0a559e-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.141.5:35973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721074, "uuid": "6a5e4580-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.235.198:45295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721248, "uuid": "d23cbb12-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.86.41:55273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721262, "uuid": "dadd1b81-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.151.220:49148/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721323, "uuid": "ff5635a4-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.28.217:57370/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721427, "uuid": "3cee6c4a-2d80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.172.81:45503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721485, "uuid": "5f820a22-2d80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/1NfPMNDh", "Tag": [ { "name": "PowerShellDiscordStealer", "colour": "#99422d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721486, "uuid": "5ff0b36c-2d80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.161.74:41784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721610, "uuid": "aa28b178-2d80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.153.215.231:60247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721728, "uuid": "f0a16a8e-2d80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.10.58:54269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721908, "uuid": "5bc651b9-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.252.141.203:47229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721909, "uuid": "5c103d24-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.193.66:47077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721965, "uuid": "7e017511-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.244:40643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718721968, "uuid": "7fcb00fa-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.50.210:55532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722085, "uuid": "c558927c-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.207:40099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722156, "uuid": "efaad94c-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.91:50196/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722209, "uuid": "0f0cea23-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.221.10.121:47183/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722212, "uuid": "10e5ced9-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.96.141:47771/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722267, "uuid": "3172f632-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.92.122:46356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722326, "uuid": "54a97e9b-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/EBymsJsk", "Tag": [ { "name": "PowerShellDropboxStealer", "colour": "#cdf6de", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722446, "uuid": "9c6145c0-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.225.205.107:54853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722508, "uuid": "c153725a-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.228:37455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722508, "uuid": "c167fb40-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.174.212:38766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722626, "uuid": "07f0de15-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.64.81:42071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722628, "uuid": "08c9873a-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.0.81:53278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722745, "uuid": "4ec839b9-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.63.169:39950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722745, "uuid": "4ed6b84e-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.248.67:38492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722746, "uuid": "4f7a5386-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.94.245:59010/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722868, "uuid": "97a6aaf0-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.141.5:35973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722985, "uuid": "ddc1be16-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.152.49.138:59783/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722985, "uuid": "ddf6a42a-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.222.130.34:50539/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722986, "uuid": "de6fb372-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.108.211.86:38625/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722987, "uuid": "deb04d22-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.153.127:41655/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722988, "uuid": "df62464b-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.220:60288/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722989, "uuid": "dfffe86e-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.186:37278/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722992, "uuid": "e1d82046-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.151.192:59758/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722996, "uuid": "e41845d9-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.224.135:55219/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722998, "uuid": "e558a90b-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.65.109:50406/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718722999, "uuid": "e5ce06c0-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.199.154:50546/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723000, "uuid": "e6640771-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.219.193:58670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723000, "uuid": "e66e25b2-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.130.63:39497/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723016, "uuid": "f020146e-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.108.111:59715/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723056, "uuid": "07b77cbc-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.64.138:58489/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723109, "uuid": "27bf88d4-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/jVeXCTvr", "Tag": [ { "name": "PoshC2", "colour": "#e6aab3", "exportable": true, "hide_tag": false }, { "name": "PowerShellDropboxScreenStealer", "colour": "#5bc0a3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723110, "uuid": "280babd6-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.236.157:53869/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723123, "uuid": "2fd90d0f-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.214.239:39514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723165, "uuid": "48fe2e7a-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.215.56:34768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723165, "uuid": "49375b11-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.139.9:47009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723238, "uuid": "749ab125-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.175.41:33742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723287, "uuid": "918f58ed-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.68.134:44617/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723375, "uuid": "c5fc786a-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.153.215.231:60247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723415, "uuid": "ddb43dc3-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.178.247:58702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723417, "uuid": "df2d1d96-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.208.252:41130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723465, "uuid": "fba03758-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.142.55.3:51500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723470, "uuid": "fef92b55-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.138.171:57524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723497, "uuid": "0e9b0692-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.80.181.5/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723582, "uuid": "414b5867-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.224.2.205/%E4%B8%AD%E9%A9%B0%E6%95%B0%E6%94%B9300.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723630, "uuid": "5e4ff02b-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.199.145.249:8080/NYILVANOS/Egyeb/BestMacro.7z", "Tag": [ { "name": "7zip", "colour": "#0b8d16", "exportable": true, "hide_tag": false }, { "name": "Mamut", "colour": "#2af2c3", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723657, "uuid": "6e709263-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.181.129:41264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723764, "uuid": "ae07ff57-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.220.74.183:1338/keylogger.py", "Tag": [ { "name": "byob", "colour": "#5d8107", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723764, "uuid": "ae0ec953-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.220.74.183:1338/miner.py", "Tag": [ { "name": "byob", "colour": "#5d8107", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723766, "uuid": "aeea3d08-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/taUJywzd", "Tag": [ { "name": "PoshC2", "colour": "#e6aab3", "exportable": true, "hide_tag": false }, { "name": "PowerShellDiscordKeyLogger", "colour": "#07a7a4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723766, "uuid": "af24b694-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.140.209:45821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723826, "uuid": "d2c7f736-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/UGSR6z5y", "Tag": [ { "name": "PowerShellDropboxStealer", "colour": "#cdf6de", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723839, "uuid": "dae22bf8-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.206.125:39439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718723946, "uuid": "1a7bc513-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.170.84:51381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724067, "uuid": "62978360-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.168.210:47564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724126, "uuid": "85ec24a9-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.96.123.249:53548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724186, "uuid": "a9c8775c-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.225.205.107:54853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724189, "uuid": "ab266f0a-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://evr9.dmnode4.space/rust-stealer-public.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724189, "uuid": "ab4fffb0-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://evr9.dmnode4.space/KR6nDu9fLhop1bFe.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724245, "uuid": "cccaff1b-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.246.41.86/rust-stealer-public.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724246, "uuid": "cd144e68-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.246.41.86/KR6nDu9fLhop1bFe.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724246, "uuid": "cd4d6cc9-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.138.171:57524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724251, "uuid": "d0728485-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.132:48482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724309, "uuid": "f29f2409-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.156.111:49717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724365, "uuid": "14336300-2d87-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.248.67:38492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724368, "uuid": "163f12f6-2d87-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.174.58:40921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724670, "uuid": "c9e801f7-2d87-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.139.9:47009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724686, "uuid": "d36f1d29-2d87-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.179.157:49800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724727, "uuid": "ebd2ccd8-2d87-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.140.209:45821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724788, "uuid": "1068035b-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.214.239:39514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724849, "uuid": "349aa00b-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.163.112:44803/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724850, "uuid": "35807649-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.191.81.244:45550/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718724853, "uuid": "375d7134-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.190:49143/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725024, "uuid": "9d3d0b15-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.142.55.3:51500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725086, "uuid": "c1f4f8b8-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.208.252:41130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725266, "uuid": "2d2b9c8f-2d89-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.0.81:53278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725446, "uuid": "98700427-2d89-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.201.103:58927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725508, "uuid": "bd5cf002-2d89-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.175.41:33742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725568, "uuid": "e1772982-2d89-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.74.135:55119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725625, "uuid": "02f58851-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.229.39:57472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725686, "uuid": "278c38b6-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.63.210:41299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725745, "uuid": "4aa57623-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.148.239:49508/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725745, "uuid": "4abd6e3d-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.217.48:57294/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725746, "uuid": "4b12d61c-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.127.163:43063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725746, "uuid": "4b22bcd3-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.131:39185/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725758, "uuid": "52b13d6e-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.192:34697/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725761, "uuid": "5437e4cf-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.4.81:54813/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725808, "uuid": "708a38fb-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.79.25:40708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725809, "uuid": "70a998ec-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.96.123.249:53548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725809, "uuid": "70b0b810-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.14:34925/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725836, "uuid": "81423a4f-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.156.111:49717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725879, "uuid": "9a698eb5-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.115.221:47133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725932, "uuid": "ba7bca43-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.132:48482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725985, "uuid": "d9df4854-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.65:49295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725985, "uuid": "d9e4fb84-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.149.147:41810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718725993, "uuid": "deacf517-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.51:40585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726045, "uuid": "fd9e4c68-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.105.14:57518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726109, "uuid": "23a53f94-2d8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.42:60800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726314, "uuid": "9dc9db94-2d8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.237.66:50943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726411, "uuid": "d7be7baf-2d8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.39.48:37073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726469, "uuid": "fa4f74b0-2d8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.126:43232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726653, "uuid": "67bb1b9f-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.17.204:40866/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726769, "uuid": "ad3385d5-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.142.98:60855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726827, "uuid": "cf69ec2b-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.113.157:35894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726887, "uuid": "f386d7ba-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.223.151:34565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726900, "uuid": "fb3cdbff-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.253.148:53619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726946, "uuid": "1671738b-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.252.226:50230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718726946, "uuid": "16e48c05-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.39.48:37073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727014, "uuid": "3f6bd2b1-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.234:58822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727171, "uuid": "9ca86188-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.141.198:49217/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727187, "uuid": "a601d4e9-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.74.135:55119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727246, "uuid": "c9426b5b-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.201.103:58927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727261, "uuid": "d2632e78-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.236.207:52298/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727322, "uuid": "f67b0d24-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.104.73:52344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727426, "uuid": "34bc4cf2-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.127.163:43063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727426, "uuid": "34eed535-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.75.228:33639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727485, "uuid": "580217a0-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.42:60800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727547, "uuid": "7cd44f05-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.237.190:54108/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727547, "uuid": "7cdc5a76-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.65:58555/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727556, "uuid": "8270a71b-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.212.160:52019/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727558, "uuid": "8382e486-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.72.2:48193/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727561, "uuid": "84f99bc9-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.242.19:59174/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727608, "uuid": "a105ca0f-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.231.200.68:40224/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727609, "uuid": "a1d057d1-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.149:33464/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727625, "uuid": "ab5dc7d2-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.1.119:45496/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727667, "uuid": "c435c741-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.65:49295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727726, "uuid": "e76937cf-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.31.187/Merika.mso", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727727, "uuid": "e7e910d1-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.143.22:36832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727786, "uuid": "0b0f84be-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.31.187/SnCdFiGMcCxEUjpZYrWfT20.bin", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727786, "uuid": "0b17679c-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.12:35733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727846, "uuid": "2f45ec2b-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.252.95:42900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727909, "uuid": "54652773-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.104.73:52344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718727972, "uuid": "7a14edd8-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.240.37:50439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728046, "uuid": "a63f792f-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.31.98:38340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728150, "uuid": "e4447a70-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.236:55409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728330, "uuid": "4fd87ecb-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.113.157:35894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728332, "uuid": "507983b4-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.142.98:60855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728358, "uuid": "607cd8d0-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.68.36:35836/mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728389, "uuid": "72da3f71-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.94:39202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728446, "uuid": "94b329c6-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://ttps://filebin.net/grjwfm5vaba8kshr/dre.jpg", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728448, "uuid": "95bafaf5-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://filebin.net/grjwfm5vaba8kshr/dre.jpg", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728448, "uuid": "9600c852-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.52.47:48749/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728448, "uuid": "961b3fa2-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.253.148:53619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728449, "uuid": "96480f17-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.183.146:60642/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728516, "uuid": "be2ea672-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.39.168:33349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728575, "uuid": "e154f808-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.35.60:59253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728694, "uuid": "28aa83d1-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.39.213:59792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728751, "uuid": "4a70ce5a-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.152.52:58005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728927, "uuid": "b38e2847-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.91.77.82/king/murka.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718728928, "uuid": "b43da266-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.91.77.81/king/murka.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729051, "uuid": "fd286c0b-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.44.75:56106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729112, "uuid": "21a5035b-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.11.88:55600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729166, "uuid": "41c2d85a-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.75.228:33639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729166, "uuid": "420b27af-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.99.94:41250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729227, "uuid": "661976e8-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.70.44:49903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729242, "uuid": "6f550476-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.216.74:58842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729346, "uuid": "ad3d5c9a-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.252.95:42900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729346, "uuid": "ad4d497d-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.172.155:47524/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729346, "uuid": "ad6dc600-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.42.76:45700/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729347, "uuid": "ad986927-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.38:53081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729410, "uuid": "d394d8fa-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.253.93:40551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729526, "uuid": "184403bc-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.12:35733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729586, "uuid": "3c24afbd-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.143.22:36832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729586, "uuid": "3c6005b1-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.193.55:51954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729586, "uuid": "3c63dcf8-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.149.147:41810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729587, "uuid": "3c82f817-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.62.83:59500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729707, "uuid": "848bc621-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.63.106:37691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729708, "uuid": "852dbac5-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.168.94:60706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729766, "uuid": "a73f19d6-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.164:54616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729766, "uuid": "a74994f4-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.33.230:44119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729776, "uuid": "ad325a36-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.188.136:49437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729826, "uuid": "cb2adfaf-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.164.200.88:33029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729854, "uuid": "dc0f4d80-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.185.32:47917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729906, "uuid": "fab14ccd-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.52.215:60372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729946, "uuid": "12cd25a3-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.252.226:50230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718729947, "uuid": "134b306e-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.85.107:34632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730012, "uuid": "3a3431dd-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.236:55409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730131, "uuid": "80c9c79d-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.223.8:58581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730187, "uuid": "a22dd102-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.72.13:60293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730248, "uuid": "c6a1cb4e-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.189:37350/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730249, "uuid": "c7137752-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.35.60:59253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730249, "uuid": "c747d645-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.9.239:52661/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730251, "uuid": "c8d3db25-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.149.87:55980/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730254, "uuid": "ca54f1c0-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.65.102:48103/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730256, "uuid": "cb8f20c6-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.76.217:56340/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730259, "uuid": "cd3bf716-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.104.35:59955/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730308, "uuid": "eab22f1c-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.22.86:38928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730309, "uuid": "eb1d0b83-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.61.230.2:57358/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730310, "uuid": "eba2e7a0-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.84.0:34006/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730322, "uuid": "f2aeee2a-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.131.112:37973/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730366, "uuid": "0d34dd50-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.101.0:43954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730366, "uuid": "0d48b390-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.253.93:40551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730545, "uuid": "77f7f24b-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/all%20file/DtRbsscQ/lander.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730545, "uuid": "77f8733c-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/DtRbsscQ/lander.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730547, "uuid": "78e564f2-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/rkAIWKEr2/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730547, "uuid": "7901a337-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/DtRbsscQ/lander2.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730547, "uuid": "791a50b9-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/ycJOjCuR2/lamda.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "79c5216a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/all%20file/ycJOjCuR/lamda.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730548, "uuid": "79d0378c-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/1/rkAIWKEr1/win4.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730549, "uuid": "7a3a366c-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/rkAIWKEr2/win4.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730549, "uuid": "7a666459-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/AntiVirus3.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730549, "uuid": "7a69c062-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/running/rkAIWKEr/win4.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730550, "uuid": "7a88afd5-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/ycJOjCuR2/lamd.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730550, "uuid": "7a8ec242-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/running/DtRbsscQ/lander.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730550, "uuid": "7ac82aab-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/rkAIWKEr2/win1.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730551, "uuid": "7baa0ea6-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/running/rkAIWKEr/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730552, "uuid": "7bbcadc1-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/Rihypax_LetThereBeNightingale_obf.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730552, "uuid": "7bc07c40-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/ycJOjCuR2/use%20in%20future.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730552, "uuid": "7bed61dc-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/Xujamon_LetThereBeNightingale.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "7c5ffef5-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "7c79b8a9-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/Rihypax_LetThereBeNightingale_obf.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "7c82ebf7-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm3/AntiVirus1.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "7c8c8ea4-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/main.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "7c8d5ca5-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/Enomoky_LetThereBeNightingale_obf.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "7c8ec5a7-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/Imejygo_LetThereBeNightingale.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730553, "uuid": "7cbf26c4-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/Unusoke_LetThereBeNightingale.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7cdf6a93-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/all%20file/LgGFdDAm/main.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d2b2d14-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/1/rkAIWKEr1/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d2b8b57-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/AntiVirus4.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d3bc28d-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/ab/alabi.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d4b12ea-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/running/LgGFdDAm/AntiVirus.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d4ce25d-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/sch.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d54b836-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/AntiVirus00.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d5adda6-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/1.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d62c3b3-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/Azafyvo_LetThereBeNightingale_obf.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d69b97a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/main2.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730554, "uuid": "7d6b0715-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/Client.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7d8676a5-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/rkAIWKEr/win2.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7d93b054-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/1/rkAIWKEr1/win1.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7d942f0e-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/tbsh/Chr0me.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7d9cf53e-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/all%20file/rkAIWKEr/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7da5a72b-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/running/LgGFdDAm/AntiVirus2.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7dbdb90c-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/tbsh/Chrome.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7dcd0c93-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/ycJOjCuR/lamda.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7dd1e094-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/running/rkAIWKEr/win1.exe", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7dd5793c-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/2.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730555, "uuid": "7df611c2-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/Antivirus333.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "7e1dfb8e-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/output.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "7e1e073b-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/running/ycJOjCuR/lamda.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "7e20ef30-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/rkAIWKEr/win1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "7e20f3a3-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/all%20file/ycJOjCuR/lamda1.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "7e22f65f-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/AntiVirus2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "7e3a5901-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/Ebyloto_LetThereBeNightingale_obf.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "7e61c90e-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/me/3.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730556, "uuid": "7e7b4a73-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/LgGFdDAm/AntiVirus.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730611, "uuid": "9f40eea9-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.76.49.148/ycJOjCuR/lamd.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730612, "uuid": "9fb83242-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.171.70:50283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730612, "uuid": "9fcf3142-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.179.62:49483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730667, "uuid": "c0bfbb96-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.70.44:49903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730668, "uuid": "c102bfac-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.27.179:53117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730785, "uuid": "06dd102d-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.26.77.110:888/vc.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730788, "uuid": "08b23155-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.26.77.110:888/sxe.jpg", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730908, "uuid": "5057bf99-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.38:53081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730909, "uuid": "50911ed7-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.221:50530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718730966, "uuid": "72e95f27-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.72.13:60293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731086, "uuid": "ba036811-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.62.83:59500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731145, "uuid": "dda0ccb7-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.238.236:55409/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731145, "uuid": "ddb413a6-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.216.74:58842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731148, "uuid": "df5ce026-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.68:43201/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731156, "uuid": "e4344e0d-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.140.241:36686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731267, "uuid": "265dc0cd-2d97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.16.119:44540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731326, "uuid": "49921868-2d97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.164.200.88:33029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731398, "uuid": "746ce367-2d97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.239.113:15753/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731445, "uuid": "90849416-2d97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.222.147:51011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731507, "uuid": "b56e3700-2d97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.33.230:44119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731685, "uuid": "1f748538-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.170.114:51444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731764, "uuid": "4ea24a70-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.41.49:36264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718731925, "uuid": "ae75b380-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.22.86:38928/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732045, "uuid": "f593f31d-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.172.128.116/Amadey.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732045, "uuid": "f5ebdfbc-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.84.38.229:54303/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732049, "uuid": "f8420762-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.108.143:38664/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732051, "uuid": "f931268d-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.183.1:59465/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732228, "uuid": "62ad11a4-2d99-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.101.9:33620/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732287, "uuid": "85e01825-2d99-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.86.81:47829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732525, "uuid": "1434fe98-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.27.179:53117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732647, "uuid": "5cd45fa5-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.17.49.194:55112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732708, "uuid": "8138e634-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.186:39919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732709, "uuid": "8164831d-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.96.181:42397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732709, "uuid": "8188adf1-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.84.240:44277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732736, "uuid": "91c0596b-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.140.241:36686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732947, "uuid": "0f68da06-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.251.37:39786/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732947, "uuid": "0f6e76d8-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://dpeu.pages.microcloud360.com/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732947, "uuid": "0f81c54f-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://jzktj.pages.microcloud360.com/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732948, "uuid": "0fd78b58-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.14.11:49002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732949, "uuid": "10789722-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.210.159:59023/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718732957, "uuid": "157fcc82-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.28.36:37542/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733007, "uuid": "334d3e6f-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.42.66.47/files/UN.config.CfgEncFile", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733012, "uuid": "35fc96cd-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.42.66.47/files/Vpro.exe", "Tag": [ { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733066, "uuid": "569ccfb3-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.16.119:44540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733311, "uuid": "e83aa6f3-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.211.86:57544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733366, "uuid": "0967113a-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.111:46692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733425, "uuid": "2c2787c9-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.26.237:55049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733434, "uuid": "31b0d855-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.2.114.115:28246/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733611, "uuid": "9b7507cb-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.217.137:38367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733638, "uuid": "ab539fad-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.17.49.194:55112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733679, "uuid": "c3b7d21e-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.143.197:39175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733683, "uuid": "c611d061-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.186.178:42055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733756, "uuid": "f1e19f6b-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.219.31:38214/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733845, "uuid": "26b6e58b-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.152.49.138:39334/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733847, "uuid": "27d0571d-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.7.226:56987/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733847, "uuid": "27d6a2e5-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.172.81:45503/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733847, "uuid": "27f253a0-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.246.219:51031/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733848, "uuid": "28458a00-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.224.178:46078/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733849, "uuid": "2905a297-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.190:42386/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733851, "uuid": "2a12c65b-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.243.143:60708/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733852, "uuid": "2ae127ee-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.144.134:47021/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733853, "uuid": "2bb16beb-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.84.202:32772/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733854, "uuid": "2c488975-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.11.178:44818/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733862, "uuid": "3102fb49-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.248:52821/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733875, "uuid": "3881a7fd-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.120.76:33574/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733910, "uuid": "4d4f97f3-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.187.209:49133/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733910, "uuid": "4d7506bb-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.149.98:60832/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718733912, "uuid": "4ec0dc18-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.100:56555/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734031, "uuid": "95666487-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.65.236:8082/getfile.php?download=YXBwLXJlbGVhc2UtMi5hcGs=", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "hookbot", "colour": "#c20dbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734035, "uuid": "98448118-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.143.139:49273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734086, "uuid": "b689a5b1-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.19.229:57262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734087, "uuid": "b6ec12b3-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.9.218:45516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734087, "uuid": "b70ce69a-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.30:57226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734147, "uuid": "da9ab0dd-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.168.12:49882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734151, "uuid": "dd51974e-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.30.174:8080/getfile.php?download=YXBwLXJlbGVhc2UtMQ==&id=63a9f0ea7bb98050796b649e85481845", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734213, "uuid": "02285bb5-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.170.118.242:17625/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734218, "uuid": "04de1ae9-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.254.79:8080/getfile.php?download=YXBwLXJlbGVhc2UtNA==&id=63a9f0ea7bb98050796b649e85481845", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734218, "uuid": "04e351a7-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.254.79:8080/getfile.php?download=YXBwLXJlbGVhc2UtMg==&id=63a9f0ea7bb98050796b649e85481845", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734218, "uuid": "04e3bce5-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.254.79:8080/getfile.php?download=YXBwLXJlbGVhc2UtMQ==&id=63a9f0ea7bb98050796b649e85481845", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734218, "uuid": "04e5147f-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.254.79:8080/getfile.php?download=YXBwLXJlbGVhc2UtMw==&id=63a9f0ea7bb98050796b649e85481845", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734277, "uuid": "284f2335-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.142.159.49:8082/getfile.php?download=YXBwLXJlbGVhc2UtMS5hcGs=", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "hookbot", "colour": "#c20dbd", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734347, "uuid": "51ad86ab-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.178.110:46911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734386, "uuid": "693d27de-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.186:39919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734390, "uuid": "6ba06cbf-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.8.110:8082/getfile.php?download=YXBwLXJlbGVhc2UtMS5hcGs=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734395, "uuid": "6eb81fa3-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.138:8082/getfile.php?download=YXBwLXJlbGVhc2UtMS5hcGs=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734746, "uuid": "3fe1703c-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.86.240.40:57071/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734748, "uuid": "41368d11-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.28:44266/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734749, "uuid": "419a0a1b-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.156.127:56734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734859, "uuid": "831d79b2-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.145.14:55302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734866, "uuid": "87422a4e-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.2.114.115:28246/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734927, "uuid": "abd91514-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.211.86:57544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734993, "uuid": "d310cdcd-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.38.185:48017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718734999, "uuid": "d682edde-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.222:56948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735046, "uuid": "f29d7c4b-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.164:54616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735114, "uuid": "1ad6620d-2da0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.171.25:56818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735233, "uuid": "61fb30e1-2da0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.211/x86_64", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735263, "uuid": "73f1034e-2da0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.143.0:54504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735287, "uuid": "82553add-2da0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.219.31:38214/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735587, "uuid": "34f81d41-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.19.229:57262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735655, "uuid": "5d75faa8-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.170.207:60288/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735655, "uuid": "5dbf02f3-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.179:47974/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735658, "uuid": "5f4035fc-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.14.88:49682/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735659, "uuid": "5fc0a4fe-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.252.248:41548/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735676, "uuid": "6a22d21b-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.9.218:45516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735710, "uuid": "7e8ab4d8-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.55.8:34910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735768, "uuid": "a0ef0e05-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.207:45436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718735769, "uuid": "a14f33a2-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.30:57226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736025, "uuid": "3a4f58f9-2da2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.38.185:48017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736066, "uuid": "52526b3f-2da2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.4:38293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736074, "uuid": "5781c998-2da2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.71.40:43986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736081, "uuid": "5b7fb086-2da2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.170.148:50150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736193, "uuid": "9e3565f0-2da2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.118:33809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736368, "uuid": "066898e7-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc196435730_675396464?hash=Vwo8S096O8AhBW1LEg9SKHwqSYGlMIGRllWjgUjwG5X&dl=Dz9bf1bsYVTaXPl1qScpj04CqX3Q6FuJyuwQzcjvP5T&api=1&no_preview=1#tool", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736486, "uuid": "4d260d4e-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.255.126.201:39680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736547, "uuid": "71271729-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.115.252:35796/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736547, "uuid": "7160d0a2-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://kdtx.pages.microcloud360.com/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736547, "uuid": "7174b04a-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.109.60:48277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736549, "uuid": "724ed6d3-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.6.122:33112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736558, "uuid": "780f5afa-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.9.160:37484/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736574, "uuid": "8161424f-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.222:56948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736611, "uuid": "978737b1-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.89.240:59845/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736612, "uuid": "984aa3c3-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.115.45:56608/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736666, "uuid": "b864c592-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.14:34925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736670, "uuid": "ba65912b-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.218:54846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736844, "uuid": "2228171f-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.59.31.187/Craft67.csv", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736907, "uuid": "47ea60bc-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.171.25:56818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736909, "uuid": "48d24a44-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.88.104:43403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718736917, "uuid": "4e0ead3b-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.139.216:38554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737025, "uuid": "8e47f774-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.55.8:34910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737147, "uuid": "d6a196e1-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.98.53.135:46045/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737212, "uuid": "fd58baed-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.204.12:48887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737217, "uuid": "007165f8-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.130.32:44961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737268, "uuid": "1edeb248-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.207:45436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737269, "uuid": "1f7b6c74-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.153.109.249:46673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737386, "uuid": "65887975-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.83.220:45804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737387, "uuid": "660d9a91-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.102.141:37189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737447, "uuid": "896a8ed8-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.202.88:38181/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737447, "uuid": "897fa0e9-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.101.177:40834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737451, "uuid": "8c53ceb6-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.29.201:37930/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737467, "uuid": "958ff318-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.134.92:47290/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737511, "uuid": "afc3216d-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.235.117:33307/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737895, "uuid": "94b73344-2da6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.239.92:34182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737927, "uuid": "a7b77701-2da6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.153.109.249:46673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737928, "uuid": "a834a927-2da6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.20:36354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737987, "uuid": "cbced5a7-2da6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.4:38293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718737989, "uuid": "ccf5aab9-2da6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.118:33809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738046, "uuid": "eebb489f-2da6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.255.126.201:39680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738291, "uuid": "80cf0b19-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.69.57:35674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738347, "uuid": "a24acbea-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.99.30:53987/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738357, "uuid": "a80fc964-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.146.136:34080/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738360, "uuid": "a9e41f91-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.55:55482/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738414, "uuid": "ca02edfe-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.100.107:53544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738414, "uuid": "ca365392-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.15.13:60277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738646, "uuid": "546f6b69-2da8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.204.12:48887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738713, "uuid": "7c37b30a-2da8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.66.213.210:57267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738765, "uuid": "9b918fe6-2da8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.83.220:45804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738827, "uuid": "c039c6d6-2da8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.186.20:34876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718738846, "uuid": "cb70eb09-2da8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.200.12:39089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739074, "uuid": "53572547-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.213.81:50286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739075, "uuid": "53ecfc38-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.230.135:40487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739133, "uuid": "769e6671-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.42.8:23053/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739247, "uuid": "bad7b8f8-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.106.19:50425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739248, "uuid": "bb1b439f-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.172.6:33184/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739250, "uuid": "bc85a82e-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.204.167:39955/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739312, "uuid": "e15f99af-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.193.20:46080/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739314, "uuid": "e2cbfa8d-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.197.16:34382/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739785, "uuid": "fb69902a-2daa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.20:36354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718739786, "uuid": "fbec99da-2daa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.106.104:43793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740085, "uuid": "adf40148-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.66.213.210:57267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740085, "uuid": "ae1882ac-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.100.107:53544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740085, "uuid": "ae2c31a4-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.136:47844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740085, "uuid": "ae32bebe-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.207.95:53225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740086, "uuid": "aecd81a1-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.109.60:48277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740146, "uuid": "d293032c-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.114.205:51564/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740150, "uuid": "d5078c5b-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.131.186:47516/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740158, "uuid": "d953e135-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.108.56:52253/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740293, "uuid": "2a4fbad5-2dac-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.220.156:60313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740385, "uuid": "60e64e7e-2dac-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.213.81:50286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740508, "uuid": "aa6c3e0a-2dac-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.186.20:34876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740627, "uuid": "f12694a9-2dac-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.236:34762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740686, "uuid": "1401cf80-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.233.161.89:40146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740686, "uuid": "1486f6e5-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.125.195:35694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718740935, "uuid": "a8f7fcbc-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.251.183:51440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741044, "uuid": "e9fc07af-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.181:35559/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741045, "uuid": "ea34f34b-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.212.20:51185/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741120, "uuid": "16ce6aa0-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.81.33:39026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741121, "uuid": "17c20d21-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.147.143:44883/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741262, "uuid": "6bccd76a-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.179:51649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741285, "uuid": "795c195f-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.136:47844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741286, "uuid": "7a16a45d-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.54.16:49706/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741354, "uuid": "a24b400b-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.106.104:43793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741410, "uuid": "c3b5d1a5-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.72.202:59055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741415, "uuid": "c6ec9199-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.115.115:45131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741467, "uuid": "e5b86c87-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.207.95:53225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741526, "uuid": "09108d8d-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.95.26.80:37513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741826, "uuid": "bb9f4903-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.189:37350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741827, "uuid": "bc390684-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.109:49906/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741951, "uuid": "06035766-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.116.21:42023/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741956, "uuid": "0930a2d4-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.187.114:45769/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718741959, "uuid": "0ae8bea0-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.133.254:53179/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742010, "uuid": "29638c8b-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.17.137:53257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742187, "uuid": "92eb5ef5-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.203:37278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742244, "uuid": "b53d21e7-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.238.170:60401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742245, "uuid": "b5823d2f-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.236:34762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742309, "uuid": "db7be5e6-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.247:39397/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742408, "uuid": "16c74e63-2db1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.227.152:51037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742447, "uuid": "2dde82c1-2db1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.215.42:58770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742485, "uuid": "44da1001-2db1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.251.183:51440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742728, "uuid": "d5a273f4-2db1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.72.202:59055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742849, "uuid": "1d832762-2db2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.15.133:58635/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742863, "uuid": "2624be9c-2db2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.106.200:49256/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742910, "uuid": "41b67f47-2db2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.239.77.159:52488/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718742969, "uuid": "64ff41fc-2db2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.95.26.80:37513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743267, "uuid": "16a84ad0-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.172.31:49084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743267, "uuid": "16b62844-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.156.35:58101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743275, "uuid": "1b9517d8-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.108.99:33914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743461, "uuid": "8a3cc6ab-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.189:37350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743689, "uuid": "121e4809-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.227.65:50431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743747, "uuid": "34a228df-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.164.211:37146/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743747, "uuid": "34d0a33c-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.228.228:46139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743747, "uuid": "34d84899-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.17.137:53257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743750, "uuid": "36d52988-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://wvo.team.jessicabarrett.com/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743765, "uuid": "3fba98c0-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.59.185.131:40763/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743808, "uuid": "5913a2d2-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.80.144.46:51019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743809, "uuid": "598054c9-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.130.79:46806/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743809, "uuid": "5a069e84-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.109:38632/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743810, "uuid": "5a402afd-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.18:52648/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743810, "uuid": "5a64cadd-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.17:35739/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743817, "uuid": "5e44a828-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.184.213:37633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718743930, "uuid": "a195106e-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.225.239:37996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744108, "uuid": "0bd811e5-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.227.152:51037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744110, "uuid": "0d312077-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.225.187:40265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744136, "uuid": "1cc5a96d-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.161:48709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744166, "uuid": "2e69a2ed-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.136.73:42890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744167, "uuid": "2f241040-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.35.31:43042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744225, "uuid": "51fcb193-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.236.214:36386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744466, "uuid": "e172c560-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.243.180:46291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744526, "uuid": "055b8b6d-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.88.24:43570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744526, "uuid": "055deb46-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.244.109:41398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744586, "uuid": "28ec4bcf-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.161.74:41784/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744587, "uuid": "29317794-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.171.132:51594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744615, "uuid": "39ec7429-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.7.129:48935/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744615, "uuid": "3a17095d-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.220.149:50741/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744615, "uuid": "3a17099b-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.30.206:34072/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744657, "uuid": "537f15e7-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.31.202:40346/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744658, "uuid": "53fa5c9e-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.1.220:37009/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744714, "uuid": "74fa024d-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.63.39:58877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744767, "uuid": "94bcf23a-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.184.199:52080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718744887, "uuid": "dc3559b7-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.69.51:49751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745066, "uuid": "470f37d5-2db7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.211.101.25:51831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745309, "uuid": "d7cbb50e-2db7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.244.109:41398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745309, "uuid": "d7ccb492-2db7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.172.31:49084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745314, "uuid": "dad2f9a8-2db7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.83.37:55272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745546, "uuid": "64dfc0f8-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.88.188:34171/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745547, "uuid": "65a0329b-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.37.130:45282/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745561, "uuid": "6de523ad-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.53.129:39565/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745563, "uuid": "6f81d2d7-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.23.36:40143/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745665, "uuid": "ac18d9ad-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.80.144.46:51019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745666, "uuid": "acc2d6c7-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.34.161:55618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745667, "uuid": "acff7b0d-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.35.31:43042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745725, "uuid": "d005536d-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.161:48709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745726, "uuid": "d02af205-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.131.218:58399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745802, "uuid": "fdab9d56-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.101.142:48830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745909, "uuid": "3d6ba7f1-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.138.110:53561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745919, "uuid": "43210226-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.107.121:39996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745982, "uuid": "6900d9e3-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.76:38500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718745984, "uuid": "69fed2ab-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.188.34:59907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746091, "uuid": "aa33bacb-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.151.238:39548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746144, "uuid": "c9a509fc-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.244.36.200/arm7?ddos", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746272, "uuid": "15d1dec6-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.153:44379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746328, "uuid": "3702774d-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.233.199:54871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746346, "uuid": "41c05a34-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.99.51:34389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746388, "uuid": "5aab647d-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.184.199:52080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746402, "uuid": "630c10fb-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.154.116:56830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746455, "uuid": "830a9e55-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.174.58:46632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746469, "uuid": "8af4584c-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.59.183.142:33962/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746512, "uuid": "a4e24c3a-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.183.121:57058/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746512, "uuid": "a4eb45dd-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.24.70:59174/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746513, "uuid": "a58620ee-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.180.103.231:58826/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746519, "uuid": "a8c6904f-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.82.23:38590/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746688, "uuid": "0e10d1fb-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.215.148:38803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746746, "uuid": "3097f227-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.150.155:34946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746807, "uuid": "54deb097-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.211.101.25:51831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746808, "uuid": "5522db2b-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.126.94:55054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718746987, "uuid": "c0134ded-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.78.146:42588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747108, "uuid": "084c63f7-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.165:37054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747166, "uuid": "2a8c3d66-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.188.34:59907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747166, "uuid": "2adb54c1-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.181.245:56531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747345, "uuid": "9541089c-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.49.250:53768/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747409, "uuid": "bb3b602f-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.165:37054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747466, "uuid": "dd52fb5f-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.101.142:48830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747526, "uuid": "014fac94-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.100.246:45542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747584, "uuid": "2417007b-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.83.37:55272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747661, "uuid": "51fc5934-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.107.121:39996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747707, "uuid": "6d499417-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.153:44379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747826, "uuid": "b4160633-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.76:38500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747832, "uuid": "b75db43d-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.99.51:34389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718747886, "uuid": "d801166f-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.122.138:54007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748066, "uuid": "4331ed32-2dbe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.174.58:46632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748067, "uuid": "438dafa1-2dbe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.34.23:36962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748246, "uuid": "ae85ba80-2dbe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.15:57757/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748246, "uuid": "aeb292c6-2dbe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.187.181:37178/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748309, "uuid": "d43e07d8-2dbe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.88.234:46649/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748433, "uuid": "1d9506ee-2dbf-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.150.155:34946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748666, "uuid": "a8a48669-2dbf-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.122.138:54007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748788, "uuid": "f159c8ba-2dbf-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.119.193.212:58899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748846, "uuid": "13edf3fd-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.136.215:51407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718748908, "uuid": "394587b4-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.181.245:56531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749147, "uuid": "c7595b4b-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.15:46440/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749147, "uuid": "c7a6e3ef-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.242.106.16:52932/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749149, "uuid": "c8c426d7-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.161.220:52751/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749160, "uuid": "cf2df558-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.185.54:48599/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749326, "uuid": "3205ed96-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.34.23:36962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749385, "uuid": "557b39cc-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.90.32:44473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749391, "uuid": "58ba9ec0-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.77.90:37065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749447, "uuid": "7a0acca2-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.167:37935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749513, "uuid": "a1a91011-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.92.117:41173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749626, "uuid": "e4dc709f-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.40.192:56202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749700, "uuid": "110a2e81-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.246:37004/mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749758, "uuid": "33d6415c-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.84.238:39026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718749998, "uuid": "c2d27471-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.29.138:44267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750047, "uuid": "dfe91235-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.44.92:43351/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750054, "uuid": "e3da7375-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.213.252:41131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750773, "uuid": "9067828b-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.154.97:36486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750826, "uuid": "b0381a1b-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.129:38620/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750831, "uuid": "b351099e-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.91.91:50107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750886, "uuid": "d3b2b2e9-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.90.32:44473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750946, "uuid": "f78249eb-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.152.25:35748/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750946, "uuid": "f7a17f71-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.81.30:37001/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750947, "uuid": "f83511a4-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.226.45:50701/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750967, "uuid": "042b28ba-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.140.236:45885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750974, "uuid": "0878fd2d-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.228.191:44351/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718750988, "uuid": "10dd78e1-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.148.206:36603/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751010, "uuid": "1da93533-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.254:39173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751125, "uuid": "627d39d8-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.66.189:52942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751185, "uuid": "865132b6-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.166.167:37935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751245, "uuid": "aa1eceb8-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.40.192:56202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751309, "uuid": "cfe1b634-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.92.117:41173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751309, "uuid": "d0456214-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.32:41258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751562, "uuid": "66c9dfdf-2dc6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.59.246:38044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751859, "uuid": "18386461-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.244.130:53849/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718751967, "uuid": "583749d5-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.239.18:57497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752027, "uuid": "7c00f353-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.212.238:40331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752166, "uuid": "cf0e9fd5-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.3.75:52879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752217, "uuid": "ed30eaeb-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.45.148:47195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752326, "uuid": "2e10922e-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.14:58689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752387, "uuid": "5281cb73-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.118:56093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752446, "uuid": "75e614f4-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.66.189:52942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752447, "uuid": "7657b7bf-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.62:56603/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752567, "uuid": "bdad0ffb-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.129:38620/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752713, "uuid": "1509f18b-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.160.254:39173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752749, "uuid": "2a695597-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.47.174:55611/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752757, "uuid": "2f4ea602-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.44:46621/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752769, "uuid": "3636c215-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.188.199:55786/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718752865, "uuid": "6f6f6358-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.85.111:49686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753059, "uuid": "e3473d21-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.25.123:48016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753265, "uuid": "5df22c02-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.11.199:35029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753360, "uuid": "9654f31d-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.137.233:53508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753471, "uuid": "d8ae1d5c-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.215.163:48029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753477, "uuid": "dc2cd997-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.36.41:47425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753535, "uuid": "ff134585-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.251:40860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753647, "uuid": "41825d87-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.28:36912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753647, "uuid": "41ad2ac2-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.251.166:40930/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753647, "uuid": "41bbcac0-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.45.148:47195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753647, "uuid": "41d4022b-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.11.88.83:49050/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753648, "uuid": "42265285-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.165.65:44173/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753653, "uuid": "450e09cf-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.97.116:59914/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753771, "uuid": "8bb2f4b4-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.180.130:33552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753773, "uuid": "8cb7f90a-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.124.109:44361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753783, "uuid": "9302ad61-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.62:56603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753829, "uuid": "adda14a4-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.181.187:45088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753886, "uuid": "cfecd03b-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.145.142:54331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753946, "uuid": "f398be91-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.14:58689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718753946, "uuid": "f41d4859-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.227.0:46029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754007, "uuid": "1878ca60-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.112:59898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754154, "uuid": "6fb47a3b-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.127.97:51698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754186, "uuid": "82f14a12-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.167.118:56093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754197, "uuid": "893f0deb-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.122.178:60641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754245, "uuid": "a63a5462-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.70.106:42534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754367, "uuid": "eec00e9f-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.63.110:33639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754433, "uuid": "16031de7-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.133.70:38787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754486, "uuid": "35918115-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.19.193:60542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754563, "uuid": "63d6a43e-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.10.165:60619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754612, "uuid": "80d80b6a-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://shj.pages.microcloud360.com/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754726, "uuid": "c4fcc16e-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.128.191:53021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754733, "uuid": "c93cfcd5-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.25.123:48016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754755, "uuid": "d62dcc6f-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.230.152.6:56949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754797, "uuid": "eefa67c3-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.166.1:36677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754845, "uuid": "0be8ed16-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.153.170:46813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754849, "uuid": "0df8557d-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.110.173:38428/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754908, "uuid": "3118b4ee-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.173.251:40860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754908, "uuid": "3127b057-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.11.199:35029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718754921, "uuid": "38bc65d0-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.170.133:53738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718755085, "uuid": "9ab91542-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.204.90:46563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1718755146, "uuid": "bef6647b-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.70.106:42534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692745, "uuid": "7548616b-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.13.102", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709483, "uuid": "6df52947-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.14.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711763, "uuid": "bcf8fd0e-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.14.64", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732643, "uuid": "5a8c3b00-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.17.49.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723464, "uuid": "fb13bb3d-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.80.181.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718365, "uuid": "1bd7801f-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.124.107.228", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671506, "uuid": "01ccff52-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.76.158", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696584, "uuid": "657864b8-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.223.132.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754724, "uuid": "c38912f5-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.230.152.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730245, "uuid": "c4b62082-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.237.76.217", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740143, "uuid": "d0eeece5-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.131.186", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718738344, "uuid": "a0a390ab-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.100.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688844, "uuid": "6054baf8-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.101.17", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701385, "uuid": "9307f13d-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.110.236.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696944, "uuid": "3bc2766a-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.168.31.87", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716924, "uuid": "c124d9c2-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.90.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723407, "uuid": "d980f55b-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.178.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718699764, "uuid": "ccb01c0f-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.82.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718844, "uuid": "395ceec8-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.135.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676064, "uuid": "9e8ead61-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.104.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702283, "uuid": "aa6ca054-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.70.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722444, "uuid": "9b017230-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.225.205.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673905, "uuid": "979d08fc-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.200.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718750824, "uuid": "aef74784-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.25.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720408, "uuid": "dd62e68a-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.26.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704808, "uuid": "8b471a56-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.30.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696764, "uuid": "d0cd5b23-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.57.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673306, "uuid": "329b0e5c-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.18.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682664, "uuid": "fc785b2b-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.19.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688423, "uuid": "65541b47-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.241.211", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707745, "uuid": "61fde6c3-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.245.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718738407, "uuid": "c60a826c-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.100.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689743, "uuid": "7833ca0f-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.100.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb8b47c2-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.130.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678583, "uuid": "7c392197-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.130.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720764, "uuid": "b20a8037-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.172.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673963, "uuid": "ba744686-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.176.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744584, "uuid": "27920526-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.220.149", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718750944, "uuid": "f6520765-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.226.45", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692445, "uuid": "c25a6897-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.23.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692745, "uuid": "7549fe27-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.233.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728144, "uuid": "e0c916e2-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.238.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693166, "uuid": "7040f473-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.242.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744524, "uuid": "03f1322c-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.244.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712609, "uuid": "b4fcb58d-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.248.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681164, "uuid": "7e366386-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.251.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701446, "uuid": "b7507a8b-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.251.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670785, "uuid": "53f54e97-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.7.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675344, "uuid": "f1388ebf-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.85.209", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680807, "uuid": "a97e00b2-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.13.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719266, "uuid": "34e4bd5e-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.148.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730245, "uuid": "c4b50ab2-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.149.87", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704143, "uuid": "ff456061-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.57.112", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686084, "uuid": "f2c951e3-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.67.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741408, "uuid": "c25d690b-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.115.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694964, "uuid": "9fee4219-2d42-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.57.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718750944, "uuid": "f6525601-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.152.25", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718699105, "uuid": "43fdaef2-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.99.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686807, "uuid": "a204a7bf-2d2f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.87.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744106, "uuid": "0a8f6526-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.225.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698565, "uuid": "01f767f9-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.243.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688844, "uuid": "6054c8e0-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.3.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701385, "uuid": "9306f22a-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.7.115", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675706, "uuid": "c8f28cb7-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.177.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749624, "uuid": "e3796c25-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.40.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734084, "uuid": "b55a5cce-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.19.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705106, "uuid": "3d0e79de-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.172.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733423, "uuid": "2b501001-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.2.114.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705046, "uuid": "19115381-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.55.75.253", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751543, "uuid": "5bd7ad67-2dc6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.59.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696944, "uuid": "3bc212ba-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.139.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696046, "uuid": "249fcb29-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.140.91", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691544, "uuid": "a94460d2-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.239.157", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723407, "uuid": "d9835b4c-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.208.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723107, "uuid": "262000d9-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.214.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671506, "uuid": "01cd17e0-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.215.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729225, "uuid": "64c20117-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.216.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741224, "uuid": "54d1c48d-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.223.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724846, "uuid": "32abeca9-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.223.190", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725743, "uuid": "496b0c0f-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.223.192", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740143, "uuid": "d0ef1672-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.114.205", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711344, "uuid": "c32d696d-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.162.219", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741824, "uuid": "ba825974-2daf-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.166.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675283, "uuid": "cd5d277d-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.171.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681283, "uuid": "c58dae22-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.197.190.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688124, "uuid": "b2c37a1c-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.10.30", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707745, "uuid": "61fdf149-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.13.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693344, "uuid": "da7743b3-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.13.39", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713144, "uuid": "f421f30c-2d6c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.13.63", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732944, "uuid": "0db916d3-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.14.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742846, "uuid": "1c05a5f4-2db2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.15.133", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711763, "uuid": "bcf9022f-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.17.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754483, "uuid": "341b0e78-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.19.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730245, "uuid": "c4b5ce8b-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.9.239", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751844, "uuid": "0eef861f-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.244.130", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718672885, "uuid": "3779fdda-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.87.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713871, "uuid": "a519d279-2d6e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.13.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705408, "uuid": "f0b7be42-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.156.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681646, "uuid": "9d81d5ab-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.177.74", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704684, "uuid": "418d6a26-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.180.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681106, "uuid": "5bc4d039-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.185.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671864, "uuid": "d77109f1-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.90.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689923, "uuid": "e34d67c5-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.10.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721724, "uuid": "edd9792b-2d80-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.10.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679363, "uuid": "4d1ce4cb-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.109.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733845, "uuid": "268f90b0-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.224.178", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751965, "uuid": "56e653f3-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.239.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736544, "uuid": "6f766659-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.6.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702345, "uuid": "cf005876-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.6.238", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718750824, "uuid": "aef74900-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.91.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716924, "uuid": "c1252278-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.94.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675344, "uuid": "f1390e3f-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.72.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746984, "uuid": "be0ae7dc-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.78.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718699646, "uuid": "869b8743-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.83.50", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688243, "uuid": "f9eccb90-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.84.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722264, "uuid": "2fb05323-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.92.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725743, "uuid": "496abb61-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.127.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742364, "uuid": "fcb05cc6-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.227.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690283, "uuid": "b9f4df28-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.58.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676724, "uuid": "2806b2fd-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.60.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696885, "uuid": "189808a1-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.61.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744708, "uuid": "7169497d-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.63.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687106, "uuid": "5439bdb8-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.63.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708408, "uuid": "ecdf2598-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.132.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697783, "uuid": "304f7759-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.133.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679845, "uuid": "6c309334-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.136.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735224, "uuid": "5cdd0331-2da0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.143.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733664, "uuid": "bb1c5f99-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.143.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734324, "uuid": "4436cf9b-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.178.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723643, "uuid": "66063e1f-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.181.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677084, "uuid": "fea2cb1f-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.183.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743807, "uuid": "58515f2d-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.184.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752744, "uuid": "277f2289-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.188.199", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745965, "uuid": "5e933ea6-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.188.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669044, "uuid": "4675231a-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.189.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701685, "uuid": "45c18630-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.190.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718543, "uuid": "863b01be-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.68.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708584, "uuid": "55c6d474-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.68.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718738284, "uuid": "7c5ec8cd-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.69.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736064, "uuid": "5132f20d-2da2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.71.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700544, "uuid": "9e023f97-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.72.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727544, "uuid": "7b16216d-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.72.2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722143, "uuid": "e7fb5f94-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.75.91", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670846, "uuid": "785bf50d-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.78.77", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745905, "uuid": "3b243969-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.107.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712306, "uuid": "009e0063-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.17.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736064, "uuid": "5132ded7-2da2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.170.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704144, "uuid": "ff46f987-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.18.58", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691364, "uuid": "3e3728b2-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.19.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753044, "uuid": "d9f45fc5-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.25.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737444, "uuid": "87fe2964-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.29.201", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673007, "uuid": "805d0a1a-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.29.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696406, "uuid": "fb62ddc8-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.30.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714884, "uuid": "01387bee-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.31.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715844, "uuid": "3d9670e0-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.79.1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718750944, "uuid": "f6524e14-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.140.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754906, "uuid": "2fd8a30a-2dce-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.170.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673484, "uuid": "9c9b0424-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.210.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727544, "uuid": "7b163418-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.212.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd967836-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.219.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733724, "uuid": "deb74021-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.219.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697305, "uuid": "1365af1b-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.219.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691544, "uuid": "a9446f6e-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.220.3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718672764, "uuid": "ef9aba70-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.223.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711584, "uuid": "522b4ad1-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.235.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681646, "uuid": "9d82bf38-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.237.162", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688423, "uuid": "6553dad6-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.242.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727544, "uuid": "7b164497-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.242.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707624, "uuid": "19bd3335-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.243.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704323, "uuid": "6a8e8c47-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.247.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708107, "uuid": "39f62129-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.248.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696406, "uuid": "fb62f4f0-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.25.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668984, "uuid": "22cafdc8-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.250.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695144, "uuid": "0b0148bd-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.255.190", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698744, "uuid": "6d12a7f5-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.27.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744645, "uuid": "4bd68964-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.31.202", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728024, "uuid": "9938dc11-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.31.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743265, "uuid": "15435e76-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.108.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728686, "uuid": "23d86750-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.39.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687706, "uuid": "b9a9cd1c-2d31-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.41.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718731743, "uuid": "421a271a-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.41.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718672465, "uuid": "3d67d18e-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.43.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676908, "uuid": "955fc4f5-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.46.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712425, "uuid": "47311c1e-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.47.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721246, "uuid": "d0e12b3d-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.151.220", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728744, "uuid": "466809e0-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.152.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718672644, "uuid": "a81966ba-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.155.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680684, "uuid": "60586d23-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.184.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741944, "uuid": "02042087-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.187.114", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697543, "uuid": "a10bbb70-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.187.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684707, "uuid": "be508ce0-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.224.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682544, "uuid": "b542f2b9-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.231.233", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721068, "uuid": "6714d32f-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.235.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726408, "uuid": "d5aac592-2d8b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.39.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729044, "uuid": "f928db9a-2d91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.44.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754184, "uuid": "81b3c5f4-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.122.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737444, "uuid": "87fe38de-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.134.92", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708645, "uuid": "7a2bfa79-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.135.2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736905, "uuid": "46f24299-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.139.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd8ddba1-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.199.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696764, "uuid": "d0cd78f9-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.241.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715008, "uuid": "4afd8f81-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.248.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740923, "uuid": "a1db8d03-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.251.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690283, "uuid": "b9f4ef98-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.30.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741105, "uuid": "0e3744cb-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.81.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb908631-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.82.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695506, "uuid": "e2bc063e-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.87.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716746, "uuid": "56c26809-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.90.35", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695384, "uuid": "9a0f8740-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.92.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696944, "uuid": "3bc25772-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.14.218", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd97537d-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.224.135", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726885, "uuid": "f2100934-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.253.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736544, "uuid": "6f76cf17-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.9.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753345, "uuid": "8d92475e-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.137.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696944, "uuid": "3bc266c7-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.185.34", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697424, "uuid": "59dbcda0-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.204.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718672707, "uuid": "cd701a71-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.223.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744645, "uuid": "4bd63bb6-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.1.220", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716085, "uuid": "cce4984e-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.27.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705944, "uuid": "305cd9ab-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.30.96", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707745, "uuid": "61fdcf3f-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.64.242", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd965fe2-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.130.63", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710744, "uuid": "5d683e44-2d67-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.133.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741944, "uuid": "020419d9-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.133.254", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705283, "uuid": "a6bb9902-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.133.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754424, "uuid": "10ef293d-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.133.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679363, "uuid": "4d1d287e-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.136.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718731143, "uuid": "dc55d779-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.140.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723224, "uuid": "6c47c849-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.175.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752207, "uuid": "e76b5bde-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.45.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715008, "uuid": "4afb6745-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.85.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715365, "uuid": "1f8d25a1-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.126.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675344, "uuid": "f138c5c7-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.130.182", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709606, "uuid": "b7588d3d-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.134.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702223, "uuid": "86c519e2-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.135.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718748843, "uuid": "127245c8-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.136.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704924, "uuid": "d04ff839-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.139.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726765, "uuid": "aa736ee7-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.142.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691123, "uuid": "aea970a2-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.171.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706846, "uuid": "4a4001bd-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.190.231", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753469, "uuid": "d746d409-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.36.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705046, "uuid": "1911580e-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.37.101", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734985, "uuid": "ce055303-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.38.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705524, "uuid": "36148746-2d5b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.39.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690525, "uuid": "4a1a0498-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.42.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711344, "uuid": "c32d68e1-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.45.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721964, "uuid": "7d09e4f7-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.50.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711763, "uuid": "bcf909ca-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.50.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb8ec739-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.63.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734808, "uuid": "64d87965-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.145.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746744, "uuid": "2f05e94a-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.150.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698984, "uuid": "fbaefeeb-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.164.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691006, "uuid": "68d07b53-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.170.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687106, "uuid": "5439908d-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.172.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708645, "uuid": "7a2bc006-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.250.80", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717526, "uuid": "27bd455a-2d77-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.116.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723824, "uuid": "d1aeb785-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.206.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704263, "uuid": "46c22068-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.255.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700906, "uuid": "75888c30-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.144.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687106, "uuid": "5439b85a-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.3.14", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725743, "uuid": "496af36b-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.4.81", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690644, "uuid": "910f488a-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.8.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745783, "uuid": "f28c8600-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.101.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740143, "uuid": "d0ef0281-2dab-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.108.56", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683444, "uuid": "cd859f18-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.112.139", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718738344, "uuid": "a0a2975f-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.146.136", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711943, "uuid": "285105a5-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.39.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729884, "uuid": "edb50c0f-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.52.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690644, "uuid": "910f3d10-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.57.207", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745544, "uuid": "63f298e4-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.53.129", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb8b174a-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.107.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718739245, "uuid": "b945ebf0-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.204.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670846, "uuid": "785c44d1-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.232.154", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684165, "uuid": "7b08623a-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.235.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701446, "uuid": "b74ffd27-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.239.136", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725806, "uuid": "6efb8f32-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.79.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730245, "uuid": "c4b5b35c-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.104.35", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754784, "uuid": "e7130d69-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.166.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698508, "uuid": "dffba875-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.244.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718738407, "uuid": "c60af350-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.15.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710212, "uuid": "201b0a91-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.216.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676425, "uuid": "7578250e-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.235.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718543, "uuid": "863b090c-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.32.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691544, "uuid": "a944c794-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.33.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711707, "uuid": "9b44d9b8-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.33.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687524, "uuid": "4d2dae67-2d31-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.33.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728567, "uuid": "dcbb2576-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.35.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673123, "uuid": "c5c9fdc0-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.36.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685486, "uuid": "8eb33273-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.36.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718740623, "uuid": "eed646f3-2dac-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.37.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675584, "uuid": "804430e9-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.38.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687044, "uuid": "2f72ec41-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.38.247", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680864, "uuid": "cbc9c1c6-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.39.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678706, "uuid": "c58a08ba-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.39.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687943, "uuid": "4728cccf-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.41.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683143, "uuid": "1a370d8a-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.46.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702345, "uuid": "cf005f24-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.47.71", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725683, "uuid": "25ce4864-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.63.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680744, "uuid": "84044ab3-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.133.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674507, "uuid": "fe542d11-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.160.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751007, "uuid": "1be7fea2-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.160.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718751307, "uuid": "ceb64174-2dc5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.160.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691123, "uuid": "aeaa1f5b-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.161.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749144, "uuid": "c5ddad5e-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.161.220", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734084, "uuid": "b5594e3a-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.161.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718731143, "uuid": "dc55f063-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.161.68", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673184, "uuid": "e9c14145-2d0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.162.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696643, "uuid": "88b3233b-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.162.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684165, "uuid": "7b084e19-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.162.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687943, "uuid": "4728c55f-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.162.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724846, "uuid": "32abffba-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.163.112", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685844, "uuid": "63f10f76-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.163.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700125, "uuid": "a3cd7b66-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.163.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710508, "uuid": "d0c3b69c-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.163.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725743, "uuid": "496b1ddf-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.164.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678046, "uuid": "3c1150ac-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.164.136", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743744, "uuid": "33241563-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.164.211", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708344, "uuid": "c6bb0beb-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.164.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691244, "uuid": "f696aa56-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.165.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735646, "uuid": "5838f993-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.165.179", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737925, "uuid": "a66ac45d-2da6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.165.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753645, "uuid": "4080ebdb-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.165.65", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749444, "uuid": "78452810-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.166.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd94d6ef-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.166.220", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727544, "uuid": "7b1654c2-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.166.65", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693344, "uuid": "da76fdee-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.166.70", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752384, "uuid": "50ea68a5-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.167.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694608, "uuid": "cb9c02d8-2d41-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.167.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709425, "uuid": "4b11b918-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.167.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686144, "uuid": "16baefa2-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.168.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729706, "uuid": "83a089eb-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.168.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692807, "uuid": "9a6963f5-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.169.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705944, "uuid": "305cc88a-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.169.118", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700365, "uuid": "332f8c56-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.169.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742007, "uuid": "27646703-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.17.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717163, "uuid": "4fa32e8a-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.17.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717944, "uuid": "20d27604-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.170.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689864, "uuid": "c01992fc-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.170.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714046, "uuid": "0da733de-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.171.109", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744584, "uuid": "27926239-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.171.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742306, "uuid": "d9d86a68-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.171.247", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728386, "uuid": "71388ce3-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.171.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733845, "uuid": "268fcb47-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.172.190", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691906, "uuid": "81352eb2-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.172.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675344, "uuid": "f138f263-2d14-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.172.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694245, "uuid": "f34bbb85-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.172.48", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682363, "uuid": "4957bdc7-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.172.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718739245, "uuid": "b944ff70-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.172.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713266, "uuid": "3c758ec3-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714944, "uuid": "24abc6ba-2d71-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.226", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712244, "uuid": "db6d4c1a-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.238", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753527, "uuid": "fa6c99f0-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703606, "uuid": "befe8b61-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701208, "uuid": "29c8d90b-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674386, "uuid": "b62f9ce1-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.173.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702164, "uuid": "636bb399-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.174.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702944, "uuid": "344fdfb3-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.174.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715365, "uuid": "1f8d395c-2d72-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.174.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698684, "uuid": "48df9d36-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.175.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702164, "uuid": "636b8feb-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.175.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696283, "uuid": "b2247d4d-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.175.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742184, "uuid": "9152c7b5-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.175.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727007, "uuid": "3b4708c0-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.175.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752744, "uuid": "277f2a16-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.27.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749986, "uuid": "bbd47780-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.29.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680564, "uuid": "1894069e-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.32.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728510, "uuid": "bad683ce-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.39.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701685, "uuid": "45c1666a-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.41.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700544, "uuid": "9e024d73-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.78.225", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735646, "uuid": "583aa933-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.170.207", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687106, "uuid": "543ae386-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.194.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682544, "uuid": "b542a93d-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.1.66", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754544, "uuid": "5813b31b-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.10.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691844, "uuid": "5bfb8af7-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.100.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675764, "uuid": "ebf68e9f-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.100.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711943, "uuid": "2850fd8a-2d6a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.102.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669044, "uuid": "4674cca2-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.106.191", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732043, "uuid": "f4c1ee54-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.108.143", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692445, "uuid": "c2593022-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.110.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700906, "uuid": "75887c85-2d50-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.115.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712544, "uuid": "8e6afb84-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.121.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709844, "uuid": "45124d04-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.144.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708408, "uuid": "ece05d0f-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.145.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705944, "uuid": "305cea29-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.145.68", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694784, "uuid": "34b06178-2d42-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.149.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730609, "uuid": "9e293765-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.171.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716746, "uuid": "56c26903-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.175.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718748244, "uuid": "acfb6d32-2dbe-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.175.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721906, "uuid": "5a636abb-2d81-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.193.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696046, "uuid": "249ecaa0-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.199.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708645, "uuid": "7a2bcf89-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.2.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737209, "uuid": "fb8e53fc-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.204.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718750045, "uuid": "ded4818a-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.213.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690465, "uuid": "260d35b1-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.214.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742424, "uuid": "203df711-2db1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.215.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720225, "uuid": "70592725-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.218.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718699824, "uuid": "f0d61661-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.221.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692270, "uuid": "5a28b913-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.249.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718543, "uuid": "863abcbb-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.4.62", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682307, "uuid": "277cc091-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.61.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694245, "uuid": "f34bcde8-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.7.144", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718738344, "uuid": "a0a3a7a7-2da7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.99.30", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737385, "uuid": "648a21b3-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.102.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708645, "uuid": "7a2c0d20-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.103.52", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697845, "uuid": "553e91e2-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.2.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705343, "uuid": "ca17c6ef-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.9.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697363, "uuid": "3602cb08-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.96.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696046, "uuid": "24a0022b-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.97.97", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749144, "uuid": "c5dd32a5-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.98.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730245, "uuid": "c4b5ee48-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.98.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752445, "uuid": "74ffc1ec-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.98.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746268, "uuid": "13b9eafd-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.99.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744106, "uuid": "0a8f18f0-2db5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.99.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704383, "uuid": "8e3d0f25-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.100.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718742846, "uuid": "1c07fd37-2db2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.106.200", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685486, "uuid": "8eb261c8-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.111.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695384, "uuid": "9a0f736f-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.111.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727125, "uuid": "811eb365-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.141.198", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746386, "uuid": "5990ca88-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.154.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680624, "uuid": "3c73fd5c-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.179.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711344, "uuid": "c32d765d-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.182.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749144, "uuid": "c5dda209-2dc0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.185.54", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729763, "uuid": "a5e30d7f-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.188.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670007, "uuid": "843f9ba9-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.211.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752144, "uuid": "c1a571a9-2dc7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.3.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719684, "uuid": "2e54f807-2d7c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.86.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686024, "uuid": "cf0787e1-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.9.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700608, "uuid": "c3ac71ce-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.99.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700544, "uuid": "9e02b49b-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.75.114.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709483, "uuid": "6df530d7-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.89.91.95", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688844, "uuid": "6054c564-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.181.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698684, "uuid": "48df9b06-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.181.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729763, "uuid": "a5e2c719-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.164.200.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711283, "uuid": "9ed05793-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.253.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729408, "uuid": "d213cedd-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.253.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743684, "uuid": "0f8be6ab-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.227.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743265, "uuid": "1543919c-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.156.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732944, "uuid": "0db910c5-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.210.159", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692508, "uuid": "e7f30973-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.91.57.240", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "Gost", "colour": "#9488c2", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703723, "uuid": "04d5efba-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.12.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703245, "uuid": "e77a23e0-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.126.86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746684, "uuid": "0b773119-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.215.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749384, "uuid": "5498e23b-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.77.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746445, "uuid": "7d150512-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.59.183.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734024, "uuid": "916bcf9d-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.143.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726645, "uuid": "6351f906-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.17.204", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745544, "uuid": "63f21b49-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.23.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702406, "uuid": "f3ef7928-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.23.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732944, "uuid": "0db84311-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.28.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723044, "uuid": "00f41c66-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.64.138", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730245, "uuid": "c4b49506-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.65.102", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720884, "uuid": "f922196b-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.70.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707745, "uuid": "61fe9516-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.73.117", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677208, "uuid": "48584327-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.74.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708645, "uuid": "7a2b779d-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.78.123", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683444, "uuid": "cd858445-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.78.164", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678944, "uuid": "5333b35d-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.78.75", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734744, "uuid": "3e6bbd52-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.86.240.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674864, "uuid": "d32cfb02-2d13-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.176.52", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679665, "uuid": "00ed9944-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.2.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720225, "uuid": "70592c00-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.230.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735106, "uuid": "165f3cee-2da0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.171.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732706, "uuid": "7fb41c8f-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.79.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718739067, "uuid": "4f61deb2-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.230.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671443, "uuid": "dc8df493-2d0b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.232.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744584, "uuid": "27923eff-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.30.206", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718748064, "uuid": "420d5fb4-2dbe-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.34.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680744, "uuid": "84044eb4-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.58.63", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698744, "uuid": "6d15dd8e-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.56.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720225, "uuid": "70593116-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.166.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718728446, "uuid": "94a5d972-2d90-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.183.146", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677144, "uuid": "22401afc-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.41.106", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723284, "uuid": "8fdd68fb-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.172.68.134", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698984, "uuid": "fbaeede7-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.155.99", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688609, "uuid": "d4024400-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.185.228.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700608, "uuid": "c3abc1fc-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.222.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680744, "uuid": "8404485e-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.233.161.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709784, "uuid": "2102119b-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.235.183.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701446, "uuid": "b750d792-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.27.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705106, "uuid": "3d0c740a-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.159.240", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743265, "uuid": "154397d1-2db3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.172.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677084, "uuid": "fea2bdc6-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.175.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727965, "uuid": "75c21d25-2d8f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.240.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680084, "uuid": "fad78c44-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.129.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676243, "uuid": "098e0243-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.135.23", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746445, "uuid": "7d167c6c-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.174.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718731384, "uuid": "6c018af5-2d97-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.239.113", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686506, "uuid": "ee68f5ba-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.92.64.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693705, "uuid": "b1b306c4-2d3f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.25.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689264, "uuid": "5a61979a-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.142.86", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670846, "uuid": "785bff6c-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.170.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681224, "uuid": "a1f0977d-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.82.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679363, "uuid": "4d1cc5c7-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.26.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678046, "uuid": "3c12b766-2d1b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.224.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747164, "uuid": "294c0083-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.181.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687044, "uuid": "2f72b9c9-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.23.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687283, "uuid": "bdcf4f42-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.69.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697965, "uuid": "9c648a48-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.77.158.21", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697607, "uuid": "c76df180-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.122.50.208", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723464, "uuid": "fb13c0ac-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.224.2.205", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721606, "uuid": "a7a4ebe7-2d80-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.153.215.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695506, "uuid": "e2bbc26f-2d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.19.215.228", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702823, "uuid": "ec5ca057-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.19.217.34", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671864, "uuid": "d7709a4f-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.223.34.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709483, "uuid": "6df5432c-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.136.174.2", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "nitol", "colour": "#59092c", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692508, "uuid": "e7f188f4-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.201.74.179", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692326, "uuid": "7b5c64d1-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.201.75.19", "Tag": [ { "name": "webshell", "colour": "#d2b32c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706183, "uuid": "bf07a74d-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.178.7.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718748784, "uuid": "eeebd9d8-2dbf-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.119.193.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673543, "uuid": "c021b064-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.226.221.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718365, "uuid": "1bd779fd-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.235.39.109", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718425, "uuid": "3f97be06-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.245.135.155", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697965, "uuid": "9c5b4e1d-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "173.248.248.135", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685366, "uuid": "470981c4-2d2c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.11.70.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746805, "uuid": "53cc962f-2dbb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.126.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747884, "uuid": "d6a9bb97-2dbd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.122.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721068, "uuid": "671589db-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.141.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729225, "uuid": "64c1fb97-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.70.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725564, "uuid": "deacf616-2d89-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.74.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726824, "uuid": "ce195c42-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.113.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713144, "uuid": "f4224926-2d6c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.229.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706846, "uuid": "4a3f87a7-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.216.22", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725743, "uuid": "496b1a38-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.217.48", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709544, "uuid": "92526e67-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.224.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704143, "uuid": "ff459e0e-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.11.229", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708645, "uuid": "7a2c1af8-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.73.213", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724846, "uuid": "32abefeb-2d88-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.191.81.244", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675883, "uuid": "32b419e0-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.11.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb8c1028-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.15.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682964, "uuid": "af249603-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.221.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718739067, "uuid": "4f62021a-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.213.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737444, "uuid": "87fe2e31-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.202.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729344, "uuid": "ac1c0d29-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.249.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692626, "uuid": "2e3c5e34-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.11.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704144, "uuid": "ff4715de-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.116.188", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698984, "uuid": "fbaef4fa-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.50.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725443, "uuid": "96f2fb8e-2d89-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.201.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729763, "uuid": "a5e31a23-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.224.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754724, "uuid": "c389289d-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.128.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718699105, "uuid": "43fd7a61-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.254.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701266, "uuid": "4c12076f-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.233.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697665, "uuid": "e9a45c4c-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.193.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670846, "uuid": "785c11bc-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.83.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676009, "uuid": "7da3667d-2d16-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.102.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718484, "uuid": "630769b4-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.165.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743744, "uuid": "33245c84-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.59.185.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694245, "uuid": "f34bc2e3-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.59.205.135", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733845, "uuid": "268c651d-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.11.178", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753223, "uuid": "450d1008-2dca-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.11.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715844, "uuid": "3d96b66b-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.210.215.11", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#337cec", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737266, "uuid": "1dd1a109-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.153.109.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734207, "uuid": "feb93575-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.233.254.79", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734144, "uuid": "d8e99d13-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.59.30.174", "Tag": [ { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false }, { "name": "universe", "colour": "#a35e0d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723464, "uuid": "fb13d9fe-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.199.145.249", "Tag": [ { "name": "7zip", "colour": "#0b8d16", "exportable": true, "hide_tag": false }, { "name": "Mamut", "colour": "#2af2c3", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718672584, "uuid": "8418890d-2d0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.206.127.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714046, "uuid": "0da76e4d-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.252.141.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693284, "uuid": "b683bf16-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.208.53.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734264, "uuid": "20957869-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.142.159.49", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "hookbot", "colour": "#c20dbd", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718738707, "uuid": "78cb3ebe-2da8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.66.213.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730307, "uuid": "e9ab1a80-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.61.230.2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678884, "uuid": "2f3641b6-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.93.81.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714584, "uuid": "4e8edcb1-2d70-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.15.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729584, "uuid": "3b1916bf-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.193.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697607, "uuid": "c76d41ff-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.208.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713208, "uuid": "1a2b92d4-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.145.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702944, "uuid": "34501c73-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.233.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729584, "uuid": "3b193ba8-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.62.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673424, "uuid": "78fb0f83-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.175.65.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707024, "uuid": "b426f36c-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.249.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690465, "uuid": "260d4537-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.122.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708466, "uuid": "0f79e382-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.186.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718484, "uuid": "6307881a-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.21.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669708, "uuid": "d1da90b0-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.114.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb8c1b70-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.78.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689624, "uuid": "30c57032-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.96.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705944, "uuid": "305ccfa3-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.61.34", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727724, "uuid": "e66d2e8d-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.143.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729344, "uuid": "ac1c099a-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.42.76", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749507, "uuid": "9df9cf4e-2dc1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.92.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674210, "uuid": "4daaed3e-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.185.73.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd936c5f-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.108.211.86", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722744, "uuid": "4dc2ff1a-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.94.245", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746509, "uuid": "a353def5-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.24.70", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730784, "uuid": "06820914-2d96-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.26.77.110", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712544, "uuid": "8e6aa563-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.159.173.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752863, "uuid": "6e84a79d-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.85.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681709, "uuid": "c31994f1-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.222.184", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706608, "uuid": "bc7e26e3-2d5d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.241.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705283, "uuid": "a6bb92ec-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.213.243.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687943, "uuid": "4728c192-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.121.68", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692084, "uuid": "eb00b70c-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.90.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741043, "uuid": "e90dfcab-2dad-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.212.20", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691123, "uuid": "aea995b4-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.8.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718699470, "uuid": "1ddbbb1b-2d4d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.84.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675406, "uuid": "167d4991-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.54.123.141", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676307, "uuid": "2f82f734-2d17-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.6.218.94", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688306, "uuid": "1f20a12e-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.37.228.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682606, "uuid": "da2c9ffc-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.42.192.116", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718721308, "uuid": "f648dae3-2d7f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.61.28.217", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681224, "uuid": "a1f07d46-2d22-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.220.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725983, "uuid": "d8dbd8b3-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.149.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722744, "uuid": "4dc317f7-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.248.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692508, "uuid": "e7f05458-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.5.228", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690224, "uuid": "966414d0-2d37-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.51.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705224, "uuid": "834ca517-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.149.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743925, "uuid": "9eac5a3e-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.216.225.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683265, "uuid": "6286e038-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.248.91.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689683, "uuid": "541da4c9-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.1.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680144, "uuid": "1e3618af-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.121.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680807, "uuid": "a97dabe8-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.138.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718739307, "uuid": "de7eddc0-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.193.20", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682123, "uuid": "ba104c65-2d24-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.195.42", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727424, "uuid": "338a024c-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.75.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687883, "uuid": "238ba93f-2d32-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.193.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680564, "uuid": "189418e7-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.148.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730609, "uuid": "9e29187a-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.179.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752323, "uuid": "2cc19c7a-2dc8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.237.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705708, "uuid": "a3e6063d-2d5b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.238.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729763, "uuid": "a5e2e51f-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.33.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682906, "uuid": "8cd14787-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.218.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671324, "uuid": "9570facf-2d0b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.41.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694724, "uuid": "10c0f527-2d42-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.44.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710445, "uuid": "ab5a46b7-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.47.60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705408, "uuid": "f0b9d10d-2d5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.57.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673665, "uuid": "0886c432-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.41.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715844, "uuid": "3d9c2761-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.64.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744524, "uuid": "03f116b0-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.88.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709606, "uuid": "b758951f-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.138.241", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb8d0232-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.166.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681944, "uuid": "4f236aa9-2d24-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.210.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737444, "uuid": "87fdf6fc-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.101.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691606, "uuid": "ce6a581a-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.24.245", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677811, "uuid": "afe397b1-2d1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.121.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702944, "uuid": "345024dd-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.253.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707207, "uuid": "2122a7d7-2d5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.188.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718699105, "uuid": "43fd99b3-2d4c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.243.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701808, "uuid": "8f2c8850-2d52-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.4.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684106, "uuid": "57f5b749-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.105.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669584, "uuid": "882571f6-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.145.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693344, "uuid": "da771a18-2d3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.138.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730666, "uuid": "bfbb5415-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.27.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670063, "uuid": "a5f02224-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.53.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687044, "uuid": "2f72f1cf-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.19.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697484, "uuid": "7db16c5d-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.230.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746084, "uuid": "a5c770d9-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.151.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678643, "uuid": "9ffe7d63-2d1c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.179.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669283, "uuid": "d4f91719-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.63.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754364, "uuid": "ed18cc4a-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.63.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718752744, "uuid": "277f3342-2dc9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.47.174", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702823, "uuid": "ec5c477e-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.207.168.120", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false }, { "name": "Redosdru", "colour": "#971e8d", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703606, "uuid": "befe47d9-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.153.148.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735224, "uuid": "5cdd33eb-2da0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.59.248.211", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671806, "uuid": "b4c08b65-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.28.132", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703245, "uuid": "e777a994-2d55-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.29.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718739125, "uuid": "722032c8-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.42.8", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741105, "uuid": "0e37567e-2dae-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.147.143", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718750763, "uuid": "8af423e0-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.154.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724668, "uuid": "c8e115e9-2d87-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.179.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713208, "uuid": "1a2b8617-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.216.77", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716324, "uuid": "5b537103-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.24.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702283, "uuid": "aa6c770f-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.47.192", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707808, "uuid": "8767bbab-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.133.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb8e4d6b-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.167.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709606, "uuid": "b755276a-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.176.148", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680744, "uuid": "84042fb1-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.189.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727307, "uuid": "edbbbd85-2d8d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.104.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725864, "uuid": "917ec00b-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.115.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720408, "uuid": "dd631955-2d7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.121.76", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754123, "uuid": "5d89b422-2dcc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.127.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730307, "uuid": "e9aa6542-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.131.112", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718681525, "uuid": "55b9ec98-2d23-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.133.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702043, "uuid": "1b754821-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.136.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686743, "uuid": "7c0a6363-2d2f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.139.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718750944, "uuid": "f651edc0-2dc4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.148.206", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd8e1a18-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.151.192", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669464, "uuid": "4089b074-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.152.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730125, "uuid": "7d74d9de-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.223.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735646, "uuid": "583ae3ff-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.252.248", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733845, "uuid": "268ef191-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.84.202", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692925, "uuid": "e06575e1-2d3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.100.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673608, "uuid": "e66a9002-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.108.108", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675584, "uuid": "80441aca-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.109.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675406, "uuid": "167b2740-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.113.102", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689206, "uuid": "378ff122-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.120.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711407, "uuid": "e881b0d1-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.123.182", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697906, "uuid": "792d83e1-2d49-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.130.157", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737209, "uuid": "fb8fd6ac-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.130.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683924, "uuid": "eb922cf6-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.136.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680744, "uuid": "8404313d-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.143.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746326, "uuid": "35f44a7c-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.99.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733845, "uuid": "268f2b4a-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.243.143", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706846, "uuid": "4a3c8793-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.244.252", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669464, "uuid": "4089bc8b-2d07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.244.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680807, "uuid": "a97dacd9-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.245.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689324, "uuid": "7df86295-2d35-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.248.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698744, "uuid": "6d12c3a1-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.248.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749685, "uuid": "083d5284-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.248.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733845, "uuid": "268fc37a-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.248.248", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696643, "uuid": "88b2fdb7-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.251.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707207, "uuid": "2122c73e-2d5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.50.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd8f5d54-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.65.109", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706846, "uuid": "4a3c83c2-2d5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.67.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718906, "uuid": "5e7f712f-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.75.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722623, "uuid": "05ff723b-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.0.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718714286, "uuid": "9cc1acd5-2d6f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.13.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718735646, "uuid": "58392add-2da1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.14.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733907, "uuid": "4b97495d-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.149.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682363, "uuid": "4957a538-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.154.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753766, "uuid": "88bf5112-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.180.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753826, "uuid": "ac1b0d64-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.181.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718484, "uuid": "6307a7e4-2d79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.2.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686206, "uuid": "3bf8898c-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.234.47", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680144, "uuid": "1e35f4dd-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.237.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706364, "uuid": "2aa3bed2-2d5d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.254.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711407, "uuid": "e881cc26-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.4.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710508, "uuid": "d0c3fe35-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.5.192", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718744584, "uuid": "27924225-2db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.7.129", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696823, "uuid": "f4293e55-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.7.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718705883, "uuid": "0c648a02-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.9.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708706, "uuid": "9efa303e-2d62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.170.197", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670007, "uuid": "843fad8d-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.184.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689744, "uuid": "78359c8e-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.185.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718739307, "uuid": "de7e2040-2da9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.197.16", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697543, "uuid": "a10bbf2f-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.198.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718738824, "uuid": "be72dea5-2da8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.200.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718708107, "uuid": "39f621dd-2d61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.201.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712306, "uuid": "00a042fa-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.204.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679305, "uuid": "2a4f2a68-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.224.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718687106, "uuid": "5439a315-2d30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.224.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743744, "uuid": "3323e4b7-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.228.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683384, "uuid": "a9b2a457-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.233.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688844, "uuid": "6054b500-2d34-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.3.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702406, "uuid": "f3ee539e-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.3.56", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674024, "uuid": "de918c92-2d11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.5.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682244, "uuid": "01ec7f46-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.68.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680383, "uuid": "ad0e8f24-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.71.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691544, "uuid": "a94440ce-2d3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.242.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718677445, "uuid": "d5b92ae0-2d19-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.82.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732706, "uuid": "7fb41a74-2d9a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.84.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688609, "uuid": "d404be2b-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.86.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732284, "uuid": "8452a902-2d99-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.86.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736905, "uuid": "46f1c81e-2da4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.88.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692084, "uuid": "eb00c6ea-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.88.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698565, "uuid": "01f75da1-2d4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.89.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736608, "uuid": "957524f3-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.89.240", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679784, "uuid": "4828fbbd-2d1f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.90.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697005, "uuid": "60af963d-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.91.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680264, "uuid": "660e35f4-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.92.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675643, "uuid": "a3d7fc29-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.93.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733845, "uuid": "268fdfa7-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.144.134", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696106, "uuid": "487d0b62-2d45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.82.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715844, "uuid": "3d972ca4-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.147.22", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670668, "uuid": "0e72eaab-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.151.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686084, "uuid": "f2c87070-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.163.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743807, "uuid": "585395bf-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.180.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671506, "uuid": "01ccf254-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.181.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674924, "uuid": "f6d8a067-2d13-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.182.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718679484, "uuid": "95067b91-2d1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.182.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718674267, "uuid": "6f9a5d6b-2d12-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.182.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736665, "uuid": "b780227f-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.183.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718695564, "uuid": "059040a9-2d44-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.184.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729824, "uuid": "c9cbfc8a-2d93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.185.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733664, "uuid": "bb1c482a-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.186.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718673243, "uuid": "0d657b27-2d10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.186.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733907, "uuid": "4b9730f2-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.187.209", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713871, "uuid": "a5198ac2-2d6e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.189.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682307, "uuid": "277ce98e-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.190.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680507, "uuid": "f6cde35b-2d20-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.191.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709963, "uuid": "8c14b2fd-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.230.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710565, "uuid": "f2fe75aa-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.232.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718737507, "uuid": "adb9c413-2da5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.235.117", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703425, "uuid": "52ccf570-2d56-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.238.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704924, "uuid": "d0505f83-2d59-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.238.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698208, "uuid": "2d53cf51-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.26.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718707808, "uuid": "87647788-2d60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.149.63", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734744, "uuid": "3e6ba6c3-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.156.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718713208, "uuid": "1a2be4fe-2d6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.132.221", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746509, "uuid": "a34fe812-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.82.23", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692084, "uuid": "eb00ad6a-2d3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.82.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683506, "uuid": "f2512c6a-2d27-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.83.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718678884, "uuid": "2f2f101c-2d1d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.84.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729944, "uuid": "11c78a49-2d94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.85.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718748307, "uuid": "d2c85720-2dbe-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.88.234", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702283, "uuid": "aa6ceec9-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.90.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684344, "uuid": "e5d582e1-2d29-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.92.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718684584, "uuid": "74b3322e-2d2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.93.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682184, "uuid": "de54e66b-2d24-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.94.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710145, "uuid": "f82a1af8-2d65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.95.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753645, "uuid": "4081167b-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.97.116", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706007, "uuid": "55bd77a0-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.242.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693764, "uuid": "d4de39ff-2d3f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.245.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724244, "uuid": "cc0da219-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.113.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697305, "uuid": "1365cb66-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.113.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682724, "uuid": "203ec2b0-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.113.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733907, "uuid": "4b973ead-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.114.100", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712306, "uuid": "009e5ce9-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.114.139", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736608, "uuid": "95755dc6-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.115.45", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671506, "uuid": "01ccf8c6-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.116.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718307, "uuid": "f98f9eac-2d78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.116.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718741944, "uuid": "02041daa-2db0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.116.21", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718747106, "uuid": "06be1433-2dbc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.117.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688544, "uuid": "acff1c8a-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.122.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710508, "uuid": "d0c401b4-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.122.14", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700425, "uuid": "569e0cff-2d4f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.122.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753766, "uuid": "88bf6806-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.124.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733364, "uuid": "07caeee1-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.125.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718718783, "uuid": "155a3362-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.125.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726043, "uuid": "fc8fc315-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.125.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716264, "uuid": "37a71799-2d74-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.126.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718720764, "uuid": "b20a9749-2d7e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.126.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718704207, "uuid": "253a8886-2d58-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.126.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718676724, "uuid": "2806cf9a-2d18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.126.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722206, "uuid": "0d541d92-2d82-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.96.141", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719024, "uuid": "a4fbd738-2d7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.104.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710924, "uuid": "c8c0953e-2d67-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.209.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702043, "uuid": "1b754eeb-2d53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.212.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682606, "uuid": "da2be5fb-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.214.13", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718733608, "uuid": "99382a06-2d9c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.217.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743807, "uuid": "58539c5f-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.218.109", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743807, "uuid": "58537f58-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.218.17", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718698508, "uuid": "dffd85ac-2d4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.219.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718686206, "uuid": "3bf85cbe-2d2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.220.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718680624, "uuid": "3c7402b0-2d21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.220.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718693943, "uuid": "3f7997f8-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.35.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745544, "uuid": "63f228fc-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.37.130", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718696707, "uuid": "aecda916-2d46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.63.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718729107, "uuid": "1eedc29d-2d92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.11.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692326, "uuid": "7b680f2e-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.117.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718717044, "uuid": "0873b6f2-2d76-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.219.172.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682307, "uuid": "277f5caa-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.168.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711643, "uuid": "75719a7c-2d69-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.146.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718669044, "uuid": "4674a421-2d06-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.149.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718715844, "uuid": "3d965970-2d73-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.176.107", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689624, "uuid": "30c567b6-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.181.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732043, "uuid": "f4c1eb9e-2d98-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.183.1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682606, "uuid": "da29ff93-2d25-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.186.247", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718688423, "uuid": "6553f0dc-2d33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.187.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689564, "uuid": "0d2a26a6-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.187.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726885, "uuid": "f2101ee7-2d8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.223.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734084, "uuid": "b55a7705-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.9.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716983, "uuid": "e4791428-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.229.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718700184, "uuid": "c7153d12-2d4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.231.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743807, "uuid": "58563b11-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.130.79", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718706007, "uuid": "55bbeeb8-2d5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.2.105.207", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718685907, "uuid": "89a4af14-2d2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.2.106.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718710212, "uuid": "201b068b-2d66-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.1.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718682724, "uuid": "203e873c-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.102.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694245, "uuid": "f34b9e8e-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.105.255", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718739783, "uuid": "fa0a4554-2daa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.106.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702763, "uuid": "c897989e-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.107.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736544, "uuid": "6f768dce-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.109.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718668924, "uuid": "fe9bad14-2d05-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.131.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745905, "uuid": "3b242ba0-2db9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.138.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723464, "uuid": "fb136f99-2d84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.138.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718716806, "uuid": "7a965b31-2d75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.138.186", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734744, "uuid": "3e6bd304-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.142.28", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734985, "uuid": "ce02fb51-2d9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.143.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718731264, "uuid": "2446e24f-2d97-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.16.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718675524, "uuid": "5c945cee-2d15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.164.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718691064, "uuid": "8b7a18e4-2d39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.213.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718689806, "uuid": "9d408c02-2d36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.219.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718709724, "uuid": "fd7d2f29-2d64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.222.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718690706, "uuid": "b5f74f2f-2d38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.223.2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718726466, "uuid": "f8c91be6-2d8b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.26.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718749744, "uuid": "2b338b19-2dc2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.84.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683084, "uuid": "f6ae3efe-2d26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.98.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718722985, "uuid": "dd90aad1-2d83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.108.111", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719924, "uuid": "bd4e4896-2d7c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.158.230", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718727606, "uuid": "a01c96fa-2d8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.159.149", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718670007, "uuid": "843fb80e-2d08-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.221.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718753944, "uuid": "f284a7d6-2dcb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.227.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671024, "uuid": "e298a65f-2d0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.110.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718692508, "uuid": "e7f3d096-2d3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.111.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718723764, "uuid": "ade7f9a0-2d85-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.140.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718719207, "uuid": "11eec69a-2d7b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.253.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745664, "uuid": "ab81c44a-2db8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.34.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718683864, "uuid": "c787c615-2d28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.40.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718745307, "uuid": "d6b15803-2db7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.83.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718725806, "uuid": "6efb342a-2d8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.95.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697124, "uuid": "a7115a80-2d47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.59.251", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718702823, "uuid": "ec5cbddc-2d54-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "65.27.165.132", "Tag": [ { "name": "7zip", "colour": "#0b8d16", "exportable": true, "hide_tag": false }, { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718746509, "uuid": "a3525a36-2dba-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.180.103.231", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697607, "uuid": "c76e09c9-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.110.49.232", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718730544, "uuid": "775706aa-2d95-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.76.49.148", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718697607, "uuid": "c77128b5-2d48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.51.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718701385, "uuid": "9307bdf7-2d51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.252.69.131", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724244, "uuid": "cc0d8071-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.246.41.86", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734385, "uuid": "68574ea1-2d9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.242.138", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718694067, "uuid": "8967ec7e-2d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.123.85.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718734024, "uuid": "916be094-2d9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.65.236", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "hookbot", "colour": "#c20dbd", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1718712724, "uuid": "f9c54536-2d6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.132.107.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718703784, "uuid": "28b657b4-2d57-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "atsegypt.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718671623, "uuid": "47d0525a-2d0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "btyv.pages.microcloud360.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732944, "uuid": "0dc23e24-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "dpeu.pages.microcloud360.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718724184, "uuid": "a8613424-2d86-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "evr9.dmnode4.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718732944, "uuid": "0dc2b911-2d9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "jzktj.pages.microcloud360.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718736544, "uuid": "6f82b609-2da3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "kdtx.pages.microcloud360.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718711165, "uuid": "5834b72c-2d68-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "o7labs.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718754607, "uuid": "7d9b8941-2dcd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "shj.pages.microcloud360.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1718743744, "uuid": "332d37af-2db4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "wvo.team.jessicabarrett.com" } ] } }