{ "Event": { "published": true, "date": "2026-02-05", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-05", "timestamp": 1770336922, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "a8f69c6d-0d8c-4a52-9bb0-01babfccf532", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f8e5a42-0225-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770249666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249666, "uuid": "999c362c-0b27-4b7c-835f-26564300249d", "comment": "Malware payload", "value": "62ff1855de1870035182db2686276c7e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249666, "uuid": "007348d0-3375-4d88-9c4b-15f0e0c196f5", "comment": "Malware payload", "value": "1d193aa19ae79621002d0feb3eb9f016edabd9b50be305b3d41fa2976e2cc7ec", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249666, "uuid": "94a57eed-cca8-4972-8a6e-dd2bec1ed5d5", "value": "T18131EA0525C7B2C0CE554EF5444B4F43CB579F094A306EE5522C4F5ADC113416F651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249666, "uuid": "80f56734-8066-464e-bc84-aba76fc9f4e4", "value": "48:9PrW2EuS15K2PTg5s8vso5V3QLGnYS+nHrioLmu+74KqZySSb7:vgdbws8vL5V3QLGnEnfFP5O7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770249666, "uuid": "1a3d34b1-d457-4016-81ec-8efef910e0d9", "value": 1633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249666, "uuid": "5b119f9a-5867-46ca-8023-0b1f9dfd30e0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "145e8bfd-0226-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770249799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249799, "uuid": "0f8f0472-2163-4df3-9658-94f96ecd20a3", "comment": "Malware payload", "value": "a3f2b559847043b0c8f4bee874c77747", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249799, "uuid": "be56c82b-4e4a-48c8-9627-7094b455e76a", "comment": "Malware payload", "value": "22db35d11c59a34cd0bb28762dd1dce5ed4a6f481cf7c2201267e9b3474e3b18", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249799, "uuid": "53a6caa6-5d07-42b5-b5b6-82c63168d4c6", "value": "T1BFE3FA6F83F7313572138359F5A6A738966DC133EB410ED2F9B29A9C8FC11A101762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249799, "uuid": "69bd6052-25d1-4a99-96d2-8f8aeace9aab", "value": "768:HZdapEbrcXlGRNjcXscJGcz74k/tHcTwA8KmppNsfifRf+VIrePfHKIYW7voFSn0:fapArIl4k2wImpLUIrU71F4B1hYT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770249799, "uuid": "1f26fb50-3749-4683-a7d5-35a57b6fc78a", "value": 153853, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249799, "uuid": "1f1bd9bf-e38b-42dc-9c22-a1a6b3250fce", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed9596a1-021d-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770249961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249961, "uuid": "4c1ab907-bf00-4d27-8dd7-674b69e90216", "comment": "Malware payload", "value": "da888c4f915213888301b264b0178cae", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249961, "uuid": "668047e2-ac29-4f1e-acb0-8be57ac1853f", "comment": "Malware payload", "value": "2ff52ed8ae3c0f08639dadd26243d2ee10125f8338758d89d92bab667b9873c6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249961, "uuid": "6557d632-82fb-46d3-bc45-0916f01135c3", "value": "T1C83107631D056814C826EBFB64C50901E326E17008A73DD38ABC97BA3E5AC86CB7BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249961, "uuid": "473fd651-90bf-44d1-8e8a-8312b39aa319", "value": "48:9609PMbeUdOtwFjVAqn0cXujqP62Fz0zk74XFQ:pMbdOEVAq0cXuj8Mk7p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770249961, "uuid": "449e49aa-5033-4666-a3aa-f98a4afa0177", "value": 1599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249961, "uuid": "f4b1bca4-dce5-40cf-9fe0-a7e878a59448", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b7d5480-0226-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770249972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249972, "uuid": "49bf5475-0ccb-48a9-9bea-dad4b4d62ef5", "comment": "Malware payload", "value": "05302a937a944772a7f4b93a6aa5b2d0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249972, "uuid": "0aa03320-52b5-4038-9b86-69005fd19c44", "comment": "Malware payload", "value": "646ce61873a8eaed7c5067127cf01d5c51304924d2db6ed62b7cceb98161ab0f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249972, "uuid": "e86c232a-dd02-4880-b1d7-200fe699078c", "value": "T1EBF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249972, "uuid": "f98855c8-1f67-4d71-885e-44f17849d65a", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0+:aru8GPLMWLas6lH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770249972, "uuid": "92d82e4c-43db-4960-9ff8-7f2eeb1ae85b", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770249972, "uuid": "66e9b32a-87cf-492a-85f2-1e731ec8201e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1e745ee-0226-11f1-8b2a-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1770250037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250037, "uuid": "b02038be-8479-4104-93e7-6497752b6463", "comment": "Malware payload (GCleaner)", "value": "b2824460da64ada230744ee7e772be33", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250037, "uuid": "9666ef3e-ebd4-47cf-bee9-520deb856f3f", "comment": "Malware payload (GCleaner)", "value": "320092aded95b1e82ca88260efe6272cb67482c23f0330d749d675fad2fb80d1", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250037, "uuid": "096076c9-fc34-4caf-94af-f317f1e18925", "value": "T1AA06E08D65F90B31EC70ED79DA2FC46F4C2E2A192C11216F336C5D2845E9259BB43C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250037, "uuid": "47624af2-b5ee-4a43-b8c9-a1394af84db2", "value": "4a3f446b1307d030a028ee27665ab52c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250037, "uuid": "fc23c8d2-281a-4d1e-8aa1-deab971a7d9e", "value": "98304:fsNHGR+HC1fKdx9l1Ux343zZxheqrgy3:fxcC1fYlKGh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770250037, "uuid": "96259aa8-7b9e-4d32-a91e-f5476efa07de", "value": 3827200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250037, "uuid": "d76f0e71-f319-4738-99e9-d0c7d900e3fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39ad5e18-0225-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770250155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250155, "uuid": "cf39f29e-4a87-4559-9a01-0843dce16821", "comment": "Malware payload", "value": "50cb5ebec0c20d30fa43aec5d167f06a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250155, "uuid": "6f5d975c-d738-43b0-8a35-4615b5c07c80", "comment": "Malware payload", "value": "0f527b38a182040e0c5e3e37fbe7cce5b7ce761538de752310077ff12fa43ee0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250155, "uuid": "787da5ce-1256-4a9b-8f39-c405805ba55f", "value": "T177310A27C3193840DF3A07B3FB92B6E2FC22284941B56566A72F692B0C24138FB0B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250155, "uuid": "c27c8e3b-f649-4dfa-af5f-6de8d5a635b6", "value": "48:96CXVp2u4D5COuc9kfrwR80jS8V/NYBIJ1:oCv2upc9kfY1jZ/6y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770250155, "uuid": "6180fa5b-3f02-4bbd-96e3-40a189e51fbd", "value": 1618, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250155, "uuid": "a4f30546-8252-4ca8-a4ee-51024a85d088", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ae75598-0227-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770250401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250401, "uuid": "9b86455c-6a25-4451-8972-0c7a88371c3d", "comment": "Malware payload", "value": "c59018845439dad4d30557ce61315e75", "object_relation": "md5", "Tag": [ { "name": "01x02x2026", "colour": "#7782a1", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250401, "uuid": "7aa59844-411e-4d08-8af9-f858bf894493", "comment": "Malware payload", "value": "ec7c5533adfb5a919951a4973983064b2103918bcf9f93a8c351a152a1f63567", "object_relation": "sha256", "Tag": [ { "name": "01x02x2026", "colour": "#7782a1", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250401, "uuid": "95e919c0-bd7d-4b31-8a79-1c74f29f2d49", "value": "T1C1747C56BAA418F9E57B853CC9530A06D7F2BC660760DBDF03A046961F277E08E3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250401, "uuid": "d90e496a-b8c6-4fc6-8165-995529b23735", "value": "c546646952cb160243a67da7651da44c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250401, "uuid": "19b3aaeb-c8c2-43f6-be9b-affbd3575dda", "value": "6144:5nsuD9WKIz8HZ/zVcTVQgvVHytj23vf/tRW00NnT5VxZ:5nsuhIz8HpDuVHytj2/tRWdNn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770250401, "uuid": "c45ff596-c63d-4686-bc2e-482689d525f5", "value": 368128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250401, "uuid": "e0d9b0e3-991e-4677-b6f5-8976a535d74a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fb033f5-0224-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770250442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250442, "uuid": "8ca6417d-d38f-4927-a34e-353323bc1ee5", "comment": "Malware payload", "value": "4e6ae4bbc8ba3de220c37468f51beef3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250442, "uuid": "667640e3-8d13-4d3b-ba51-8fb156011948", "comment": "Malware payload", "value": "29713df6265eab8c661ff4c55283e1e199f919d1a4306e4a73c4d1c78a8b9e4b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250442, "uuid": "56d0aea1-c1fd-4d85-af2b-592bdfc30927", "value": "T12F31E8091A798E87D02B0F3760F24EECE752913487E89747C489DF382DBE47121C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250442, "uuid": "3e2fbc1a-8461-4286-8001-ed4468ea30db", "value": "48:9u9C1GmuOxMu8Cvq2TgXQTgl9SOOexK6Ox3b194Oo:oC1GmuOxtXTgXQsS8xl8Lj47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770250442, "uuid": "f9288e16-2f43-4e6a-960d-ac9e8511787b", "value": 1633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250442, "uuid": "8c014589-49f4-4812-a33b-f1a784f06872", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5938f403-0206-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770250448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250448, "uuid": "bd6625a1-36ae-47e1-8e68-b4d0bde9e1a1", "comment": "Malware payload (Mirai)", "value": "7bd66d12d9c87a7caae46fc155868459", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250448, "uuid": "b8ddcf76-3c58-490b-b6e2-4b7f31af57a4", "comment": "Malware payload (Mirai)", "value": "aa5d3f01ed7352a91e853e6f412c5480f6baae536514cbd8ea942cf994397054", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250448, "uuid": "ae03510a-04f7-46f8-8985-99aed67c72ba", "value": "T165930A42BD429B13C5C222FBFBAF019D37166B79D6EB3242D9217F9023868DB0D672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250448, "uuid": "1b61d99d-9c5f-45b7-bf1e-31216a51ff01", "value": "1536:qIS2vc0ooLpy6avcDDejmConGrqMPbECizeJvkglyrojQADTvdhMUYcMRe:VS2vcOLsjmConGrqQQ6ZkIyro9TMXRe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770250448, "uuid": "478f579b-f8aa-4f67-8a4b-dea456d9de3f", "value": 95664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250448, "uuid": "09696dee-32ee-4ad6-9b3b-9dec574bb08b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47396b85-f386-11f0-9446-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770250641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250641, "uuid": "d83a1e61-8261-41f7-b7fd-262bf1eb09cd", "comment": "Malware payload (CoinMiner)", "value": "68b8f427224a0ef22e3d5e03363fbef8", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250641, "uuid": "ac4b313a-d285-4d46-89c4-0275d3c0bd7b", "comment": "Malware payload (CoinMiner)", "value": "f1f57eb28380e340acececdea76a5efb3617d597225c13be9a954cb159907be0", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250641, "uuid": "2e6d5cf2-cdf0-4b20-ad61-ab30e4cc3066", "value": "T18D5533D2B6D3C6CFC4F3FA39941846BC79353D2A5906030B9A6D43B77A1AD680B87D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250641, "uuid": "6061cc57-202e-4f63-8c90-07ca67d0f323", "value": "24576:dO7EQb5XgACLCKdjpfYnWN+ZPhTUu5UPsDGyMVYNVZpUPp:dOZnWkZP1dUuMVYHwPp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770250641, "uuid": "d3b50243-9d71-4336-9e9b-1a4c244bee04", "value": 1308604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250641, "uuid": "add77fbd-7ebe-4f5b-9925-956b27ab9ff7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afa01b84-0225-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770251075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251075, "uuid": "6f510d7d-5e07-44ac-aeba-c2841582b770", "comment": "Malware payload", "value": "f9cc4c3609653a5e12e3fa2c15d99d53", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251075, "uuid": "4d20cec5-6d8d-4e2a-9cf2-6d650d118b14", "comment": "Malware payload", "value": "91fd008a230d3ee54e3b2ac3ae046acf3946727738a83f6bb3f092e2c907f1db", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251075, "uuid": "f9482541-4915-4313-858d-a6b8990173cd", "value": "T1A0310A16F70D33E5D75B0636012D894E900B448D4B2A97478FABEBF3589C2A4EDCD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251075, "uuid": "4f4ae859-efb3-4dc8-adbf-4b34533c69fa", "value": "48:9vCpeTdzitj+cnMX5djgBIeFZkaZ1vhFq9No64:9CdtP25ds2eFmY7Fq34", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770251075, "uuid": "15f48273-df95-4fad-b3f1-f362fd49602f", "value": 1612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251075, "uuid": "ae6a660e-0bd1-4665-a260-ae560579a4c6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21555429-0229-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770251110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251110, "uuid": "42fe728d-bb5a-44c6-91c1-2940edb80295", "comment": "Malware payload", "value": "d9b784824cbcb93f9febeed8e4be0c8b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251110, "uuid": "f749fae4-62d2-475e-a65b-55f68c3de384", "comment": "Malware payload", "value": "16fe1cff75ec3d70f69c8e7b65f174f7cde8206496857a1205696a6c47a3002e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251110, "uuid": "2eb3d329-fda2-4009-8e9b-91bbfdccd16e", "value": "T14D8308327589582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251110, "uuid": "b2d32175-3918-436a-a435-4afdc523e087", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbneWaCVN/:XEKltp9t2SX/yr2pbeWnVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770251110, "uuid": "e3660bd2-0233-433f-8951-fff8cdbe940a", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251110, "uuid": "175d5b75-d376-410b-89f1-12a63ed0ad3f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "929424a8-0215-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770251428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251428, "uuid": "428a949a-e911-4937-a1e7-e89f89770c32", "comment": "Malware payload (Mirai)", "value": "96682df6b2f4b93713b81428aca23c18", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251428, "uuid": "686489c2-63c4-4387-9cfb-312f9b088061", "comment": "Malware payload (Mirai)", "value": "40403c3d3075db239dc254f5ccf15c00305569e9a96e17d92e206b2526da4c38", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251428, "uuid": "99ec4063-2295-497c-a30b-218e7623f9f3", "value": "T17D93F942BD429B13C1D222FAFBAF059D37127B79D6EB3206D9217F9023868DB0D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251428, "uuid": "fdf69162-398e-42fd-8dbc-9fde86af03fa", "value": "1536:yLvvprlBg9Y99MBNcPDjmCon6xqP1dNGz06WKBJw3e2k5RXilTMxDSS1jEAnMDKy:yLvvpzgMjmCon6xqddb6WKEkTXil5AMd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770251428, "uuid": "e9b6af29-95d9-4ff9-975b-ef003424c2ef", "value": 91976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251428, "uuid": "0099e7bc-6102-4ae5-89c0-163f8b6c5445", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770251777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251777, "uuid": "36e7ce79-c79e-489a-8796-fb0a1d0fdbe5", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251777, "uuid": "0d44abc6-cc7f-4535-afd7-4af2cb37f5f5", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251777, "uuid": "85b77d54-fb4c-4427-98cd-590941faa92e", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251777, "uuid": "f04420be-e1a7-4496-9d88-cd063c2fd7c8", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770251777, "uuid": "b63b36f7-a77a-41ff-b1b6-442c3eb8e3fa", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6778b089-0225-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770252138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252138, "uuid": "34552de6-acff-4846-b1d6-45996049fdc2", "comment": "Malware payload", "value": "aa00b5180e697ce272628e134b12d9a6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252138, "uuid": "c57e1c49-a81b-42b3-aa82-75864c74c49d", "comment": "Malware payload", "value": "996b096ef82c5601a9b12a7959f83ef9658c79a662fa416e178e769e7273b22c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252138, "uuid": "74e141b4-3c46-4935-98b0-b4dcef65c281", "value": "T157312C09DD160245F288EAF001C43BBBDC7088B54550609B520DBF0599CD1FC5BDD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252138, "uuid": "2329289f-a2ba-4cf1-a4fc-f7e8c9bce7fa", "value": "48:9Rb0YywcM9yzGMypdq1Zn4nZSsHaoPEtCRQzjbVbe2:4rw1Mu41Z4nZS8a26Q2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770252138, "uuid": "92776a94-740a-4d5c-acb0-c7224753bfdc", "value": 1601, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252138, "uuid": "ded81713-c25e-43ee-929d-bfddd6a403fa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1770252489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252489, "uuid": "7153a9bb-6a31-4d57-b88b-4472b224d4c1", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252489, "uuid": "76529cc4-e251-42ea-9782-ad9463c9c84b", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252489, "uuid": "cb8cc120-81df-4208-9d4e-af8b0d960112", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252489, "uuid": "ac7d023c-8e52-4527-ac71-4001b6a04290", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770252489, "uuid": "993ec6b4-bdbd-46c5-8164-856344039214", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e7b0ab8-0215-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770252640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252640, "uuid": "f57751a9-8b23-4b37-80b1-2f06cbfbe2ac", "comment": "Malware payload (Mirai)", "value": "beee2d924f01f359938557846d564f82", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252640, "uuid": "9cc2cd2d-6cdd-45d7-a493-346c5dca71df", "comment": "Malware payload (Mirai)", "value": "d770443c789ec969c045db3a6d5a1115881278841c4c0f0d421fa7c49fa1bd1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252640, "uuid": "07fc5b16-06da-4c02-9513-b2657279eff1", "value": "T1B47318C6AA43DEF3E91711F502B7A7365A32FD3A0836D5C7E364FCA2A9115C0A1163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252640, "uuid": "b263de73-b899-482e-9e80-f8ada088dc94", "value": "1536:FowF2OejfwG8CT2pUkOpS3TlpuqXfjZm53JaK9J/yCD4G6i9LVd:FowwTrwG8CTTkNTlRflm53EK9JKe4m1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770252640, "uuid": "f5eedc3b-855e-4307-8c11-40688d04d455", "value": 79244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252640, "uuid": "04f836af-1957-4e62-b8fc-ff670c45b089", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b8ec3d1-0206-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770252677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252677, "uuid": "f8f41d7b-2ecb-4233-bbcc-96f575f3ef57", "comment": "Malware payload (Mirai)", "value": "d795f3c83342377083837dbfd0484045", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252677, "uuid": "39fd4b16-7a31-4d7f-a381-02e4ab358ad4", "comment": "Malware payload (Mirai)", "value": "c261ad575f1c2eb0ef43c4c03b2e0837738626519bdedd405863d55838961131", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252677, "uuid": "17312d91-c178-46cf-89ec-9606fbe0e3ed", "value": "T138C3E706BF114FF7D8ABCD7346FA070529CCB82A15BA2B357534EC68B24B1DA16D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252677, "uuid": "39cea512-867a-40d0-a851-2080ff554cbf", "value": "1536:Vp6/zq40RhVOXTzaX6dt+WRGStRsM3C/DE2ctcZusVYRZ2x7XzjpAqVE:f6bq40RhVOX6w+C38DtctctHDVE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770252677, "uuid": "441029e1-6dd6-4a8c-b4e3-4f085c93ceb0", "value": 122440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252677, "uuid": "62d30aee-5cf9-4605-9b35-858c49eec649", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b48577fa-0215-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770252954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252954, "uuid": "dc2fd365-b499-4fe9-a42b-3462455a7b72", "comment": "Malware payload (Mirai)", "value": "42c957e9bb58adcd961ee03bb1d7f115", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252954, "uuid": "0a9b5710-9545-4801-93c3-c764f889483f", "comment": "Malware payload (Mirai)", "value": "714679fe2be826f5b8abd867c1ad5e77fda1a83833b056ac2bee419f3ffb6ac2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252954, "uuid": "9afa5d33-af93-42e8-8a53-7de6b5fce029", "value": "T1D2732B077A428BAFC04BC1F807E7793E9922BD7E0A3AA1F5A7E4FD825D05CD05A1D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252954, "uuid": "c965001a-9167-4e0d-b50a-444093007b22", "value": "1536:p59Qjsjbujf7LUmBr0SR121Ql+d5T2muIE7F/bk9nhMU/K:BQjsjbufLTBrf12fdt8IE7FQ9hMgK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770252954, "uuid": "e6cdc474-dc80-4f77-b179-e76bcbe51df0", "value": 73664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252954, "uuid": "ede0c2c2-d73a-4af4-bb49-adb0b0550b56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e775daf-0215-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770253316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770253316, "uuid": "d483fa7b-f0bd-403e-b28f-f26c7e2f944c", "comment": "Malware payload (Mirai)", "value": "957defdfae4a18680dc72a6abe02c9b6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770253316, "uuid": "0a84cfd3-1e97-4563-9ded-7f3e5ff15140", "comment": "Malware payload (Mirai)", "value": "97b405aea4b97abe1b581025018eefee43cd388e57019735b424ac68b3ab1e04", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770253316, "uuid": "8c0014a5-3df7-47c7-aa8b-3aa677b5dc85", "value": "T199B30946A9429F11D5C631FAFBAE418933136FB8E3FA7101D9206F5423C69DB0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770253316, "uuid": "8487b040-3243-44e0-a0ff-dd59b8564efe", "value": "3072:0qxvPnNM5NYqVzpOJn4fGthvNOiLd8tQa/F7h1eTlKzyf53I04+b7Bz:VxvPnNMBmZ4ethvNOiR6Qa/F7h14Kzy9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770253316, "uuid": "d667a21b-c8f9-442b-808e-fa92f969ea8c", "value": 117220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770253316, "uuid": "80894021-b6fa-4c31-bdb1-947878d16148", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f948b679-022e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770253619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770253619, "uuid": "50f54e54-75d4-46b0-8f90-e4de73b6a548", "comment": "Malware payload", "value": "19f2145b6ecb84d6912f3d02254d3d7c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770253619, "uuid": "06bfcd29-671f-4d7e-af3a-03f7bb6560e4", "comment": "Malware payload", "value": "2423226c0c68f7a51864f3b8dd313cadd65086c8e92c6f507a6ed309492bf91c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770253619, "uuid": "9c25d63b-1acc-4923-bce5-bf9b81905be7", "value": "T177A5E12CD302AC73C977B5BF609B5686DF25E0C2119C9FD2A5CA996C0B0A6143F721", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770253619, "uuid": "de3eebbe-7ab4-4cb1-8747-228f00e4dd18", "value": "49152:h2SlOiQuNEWe1r57FlK/1Ll9U7uDeu9Biu6i7c:gkGjFlOHk6hH6i7c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770253619, "uuid": "76cb6d35-838e-4de7-8d18-9e61a2c15b71", "value": 2143308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770253619, "uuid": "6113eda0-22a2-47f6-b69e-aab89c846000", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2e7d6ea-0230-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770254387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770254387, "uuid": "eda302d3-bd58-4a04-9096-417e3f0b3a42", "comment": "Malware payload", "value": "2b84ffb9d3b8b40d04a6142f5f1c397f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770254387, "uuid": "d5563f0e-4ea2-48cc-a6bf-40d868a974be", "comment": "Malware payload", "value": "6875d64186bb0394cf0aa922105a824e4819d9a8a0e009d88d6b55c3c5af40da", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770254387, "uuid": "46f23edc-8925-4001-ab2f-b91297e23621", "value": "T11693E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770254387, "uuid": "48f44787-effe-4579-a705-34ce7c0fbbef", "value": "1536:pap92uEEwH8Qw0DMqpYJKNoE+pTYeGf8BqLv3TliCoRGpNuqYPPXwIH8LutVWw:I6uEEwH8h0v+pHBqv3TliCoRGpNuqYPP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770254387, "uuid": "4e0cde32-c2ed-4ddd-ba64-bba9c5b81af6", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770254387, "uuid": "f422bd88-9966-4514-a27e-d9f7441f91a5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30488a32-0232-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770255000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770255000, "uuid": "8ddacf3c-7a62-489e-bb2f-3da7565c6bad", "comment": "Malware payload", "value": "b488c3041432856de1a7740e5aae0d9e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770255000, "uuid": "59ad5244-0d35-4fe1-95a4-97823289ce0e", "comment": "Malware payload", "value": "914a3cd9c9da97e7ddd513de472100891699490d533c1a6e30ab00e9d34c9e67", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770255000, "uuid": "ffa0f4fa-d6fa-4a4b-bddc-3c06f14d4697", "value": "T1F4756D43E2A334ECC567C134866BA7B3BA31F8644135BFBB9594D7302E12E90276DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770255000, "uuid": "ac1a55c0-32b1-4742-8e1e-77df721c97f5", "value": "95b28653dde7783f2750683da7395ac7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770255000, "uuid": "e90db030-e257-4b7c-adab-4b6b21b05bce", "value": "24576:vs5zlhNHXF7MVFZgeRx9HuSZ/wTGq75vo4FG17f/GzpFzriqOp5OxS:qzlXHXF4VFZZx1k5Fvo4gtVjp5OxS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770255000, "uuid": "caee3820-0ea3-474e-9307-77ef8a5c56ff", "value": 1685151, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770255000, "uuid": "27cb539d-c0c2-4315-9ec1-c1394142a2fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1770255528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770255528, "uuid": "1893eb26-69d8-4be6-97b7-78c303274d18", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "saudi arabia", "colour": "#782074", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "ViaCrackSite", "colour": "#db8132", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770255528, "uuid": "2859bd69-0523-41aa-8216-fc3502836fdd", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "saudi arabia", "colour": "#782074", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "ViaCrackSite", "colour": "#db8132", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770255528, "uuid": "999a4a38-b3eb-49ab-991d-c651cde2745c", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770255528, "uuid": "4d4906bc-efe9-4d5c-b04e-0de76c8ee9b2", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770255528, "uuid": "6fdc1d83-2a95-4829-b6bf-7eb611a02b2c", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770255528, "uuid": "f48ed96d-45fd-412e-9f5d-c7ff3f4b2379", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1770257591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770257591, "uuid": "b5114e02-d91b-4874-96d8-9162b1322501", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770257591, "uuid": "f4d600e9-745e-4e7d-987e-1cdb18ac839c", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770257591, "uuid": "d2268a35-4681-4869-9328-82dfd3866fe4", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770257591, "uuid": "fe855081-e1ec-4d10-9972-d0c9216bf77c", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770257591, "uuid": "adfdbc8b-94f1-4616-9c8e-e5135b5b8a75", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34d883ad-023c-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770259303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770259303, "uuid": "80340f75-f938-4056-9e7d-4ae1f2cee87e", "comment": "Malware payload", "value": "16269ecc1a8bce585f8ef51cd05ad254", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770259303, "uuid": "9abb7120-249a-45b1-9d93-d454492aa387", "comment": "Malware payload", "value": "8638dbaef6c454b0ab09752a603dc1a5ee52dffb115f690ac9ae22d7d1c568af", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770259303, "uuid": "809599dc-646c-445b-a177-6a47bccd170d", "value": "T16FE3E96F83F7313572138359F5A6B728966DC133EB410EE2F9B29A9C8FC11A201761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770259303, "uuid": "6429b4b6-4e8b-4d48-9fea-400dec0b40a7", "value": "768:1ZdapEbrTXlGRNjcXscJGcz74k/tHcTwAHempp9sfifRfiVIrePfHKIYW7uoFSn2:dapArrl4k2wLmp7oIrU7QA4YIhJgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770259303, "uuid": "debfb5f7-2c08-4449-b526-df5ae97a14d2", "value": 153968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770259303, "uuid": "6377aac7-595f-4493-8d20-191671cc0fda", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770259995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770259995, "uuid": "f5f2fde3-7f6d-404c-8c38-dd6aab78797c", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770259995, "uuid": "dd02a9d0-c2f7-4c04-b6ac-316151721ede", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770259995, "uuid": "ce3c1684-35a7-48fe-9c73-9f5514c372ae", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770259995, "uuid": "925bd5f6-13ad-4339-a979-e3991484db55", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770259995, "uuid": "0b03f6b2-1ba0-4bfd-bd45-26aa424ab6d9", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c8be26-023e-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770260432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260432, "uuid": "3c784d88-5553-464a-8c2a-2bff39ee1c87", "comment": "Malware payload (Mirai)", "value": "6c7450aac479951d6443eb15dbb24dd7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260432, "uuid": "0fc2241f-a6c0-4dff-a02d-43255d4975ae", "comment": "Malware payload (Mirai)", "value": "88615f7d7e2b67a28e5ec2a1ba6dfd302bec926f093b9efae9b341b452b63167", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260432, "uuid": "08248aa5-cc8b-4e33-909a-9c50d693dbec", "value": "T1A8D3128ABDF5CD98C653A4B4C2DE612C419D8285BC113B536F27AC8F6C806CD37667", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260432, "uuid": "341b914c-c876-4255-9c99-dd52732009b6", "value": "3072:ftiv4y0ou8LiS0cnghEvchl3kqvh5jIZcLEc2w5BrWmE7SHtLu:V4xM8oR6ch+ovLEcXFTa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770260432, "uuid": "b30977a5-846e-4b99-b2c3-2d9116b09546", "value": 141260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260432, "uuid": "001f30d2-2efd-4891-b1d8-861854508463", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770264553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770264553, "uuid": "1397e490-2610-471d-a436-8ecdcba5356d", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770264553, "uuid": "20bdba0a-fd02-4aeb-a4b3-b3e274eca9b3", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770264553, "uuid": "88b018d2-f527-48d7-ac40-7302d1748922", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770264553, "uuid": "952bab75-1589-48ec-ad88-2f41b1ff622f", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770264553, "uuid": "90c2a4b9-e2c1-4d68-b786-23353d68d4e3", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4f9bc44-8028-11f0-9bae-82aee05be84a", "comment": "Malware payload (XorDDoS)", "timestamp": 1770266708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266708, "uuid": "b5cd0c08-ccf4-43b5-b5fe-cd82319d5a97", "comment": "Malware payload (XorDDoS)", "value": "05a539916f43952bdb4f249f46dde6a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266708, "uuid": "7851130d-c54a-4117-a11d-87a2b5a17d62", "comment": "Malware payload (XorDDoS)", "value": "5fefeaf30b8cd96607ee013a771c619d2bcba75e294f57e98ba86e8b40e51090", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266708, "uuid": "379cd84d-fb41-4efd-bc6a-c159e4e72e50", "value": "T1F9C45C56E383E2F7C82705B0134BF7BF4620B6359461CD86B7989D5AB9338F22A4D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266708, "uuid": "261b7883-231c-48b3-bb82-f7c52b183990", "value": "12288:4Ufrcn+vwK5ripVU4tdZ1pNL/pVbza66ySjQn36Eoj:/fUywKQ7Fb1pNL/p5afjQn36Eu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770266708, "uuid": "24ea2fd5-1055-457d-8e1d-be1b4a13626f", "value": 548616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266708, "uuid": "62e65b49-0b71-42ff-98c0-7a42be68417d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c3055f7-074c-11ee-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1770266776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266776, "uuid": "6bfdc4d0-64ab-41c1-a0eb-9a5b32e7cf5c", "comment": "Malware payload", "value": "5dbb6f5c4c524a5d6ca602569bbca0a4", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266776, "uuid": "2e9d7eba-f7db-4447-a338-00967451ac03", "comment": "Malware payload", "value": "9f436ef653c76f6ba28138010083981e519d329121498ce18dae02d5d6eca0cc", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266776, "uuid": "f83527a4-0ff9-4325-991f-5fb4a816dacc", "value": "T11564F18BFB21AC2FC9000B7115DB0759B3BCDA5A82C7D181F394C95F39BA285B7A11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266776, "uuid": "524df3b9-02dd-4a3f-8a95-04f9e2df98b3", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xiojPOdOQ33Q:p3lOYoaja8xzx/0wsxzSiGPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770266776, "uuid": "eab80134-1dad-4722-8385-616b86a7ee1e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266776, "uuid": "8ab21338-d4f6-4831-95c6-78ab1a25bd60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b5fa6fb-024f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770267608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770267608, "uuid": "6b6296c8-6da0-4f2b-a25a-fa03bee0b4d7", "comment": "Malware payload", "value": "6a9fd069708ec248d0e68bdf12998d70", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770267608, "uuid": "bedb97eb-783b-468e-b4d6-201c29fbfe15", "comment": "Malware payload", "value": "78eb642c1045c92bb5a8af2edc9b5e7f21774780a44d2e09005d4c2cb96ce235", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770267608, "uuid": "fd2477f1-32e0-4050-9c15-f427bf825710", "value": "T16434BDD23D88BAF59A458F372F1ABDA527ADE72F3072475DC92D1841340B4CBE8998", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770267608, "uuid": "b9bfb325-ecf2-4d82-8ae4-13b9c31821d8", "value": "6144:XvR8HCXsZHd2i5iUhcOpcuOBGBaY914ipfIKil:J8YsZhoUhcOpVOB+aYTJpu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770267608, "uuid": "e004e471-4def-4b9b-b5fa-da90cd76a981", "value": 239685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770267608, "uuid": "e369d936-17b9-4844-86d2-c806f489475b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e023803-0257-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770271076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770271076, "uuid": "e27c6701-8bfe-4406-b71f-42eeab804640", "comment": "Malware payload (Mirai)", "value": "acc2761be4f10a8ab8ade7109207a912", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770271076, "uuid": "d30c1762-aefc-461f-9d87-36add7bf72fb", "comment": "Malware payload (Mirai)", "value": "27f619221277bb49ca993d373967a39ffdf38013cebe4cdc30c1f37f70ac7335", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770271076, "uuid": "52eeb0e8-9ab5-412e-941f-6534bde3e046", "value": "T1A40412E52A19F1B6C9F43FB899E6E3849B42479F9A39043E201D161B70B50749F4B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770271076, "uuid": "d6f66203-5228-415f-b385-375340375476", "value": "3072:XTuZttStV+a2W109Xx0dNY7CfQXPzy4XmAuMI5uZVzymxUWzAND9TOFwVlXQH0Lh:Xet8rq9AN4OGmSmAu9NFWzAbflX09i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770271076, "uuid": "9918138e-eff8-45b2-b8d8-49c406900515", "value": 176820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770271076, "uuid": "20893ecb-ca2f-4355-873a-b07aab40c925", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "137514cf-0258-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770271273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770271273, "uuid": "ada8ebad-c33c-4b5d-9e61-382026d277f3", "comment": "Malware payload", "value": "763dc2edb15d32112ff040010e6bf246", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770271273, "uuid": "31645faa-227c-4263-9076-9eaa243a3d18", "comment": "Malware payload", "value": "18ca41ec19cd8fbbc323bb788556c89d9591e61cf91f23786751c4307f4e35ea", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770271273, "uuid": "c83ffdf1-e640-4c6e-ab23-81fb4e5d7fc7", "value": "T11B646D7FE6956CD7C02385F66C38A9201E0DA4A40391D992F0FC6774DD626CB7B0A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770271273, "uuid": "2e60ae84-7fed-4321-a80c-c541c1c21192", "value": "6144:QSeTI8yvnjsXCSDwBK2RK4h3Vs8k1vKz5D:UYkMBvhk1yzR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770271273, "uuid": "03355604-49a3-46c2-a569-3bf68f812414", "value": 314212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770271273, "uuid": "759cdb05-f393-47f5-a783-54ca4f8d63b4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "958d81ca-025a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770272350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770272350, "uuid": "edb9d244-828c-47fe-8dd0-29e6875f2e12", "comment": "Malware payload", "value": "a994e7412e2fe6c90673bb2583895363", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770272350, "uuid": "f036cdd2-d3c3-43fc-b3d9-76c512b3cf9d", "comment": "Malware payload", "value": "24c8d619805f0fcab8ce49bb181ebf26821a49c940ff44b021ed2de1055668a7", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770272350, "uuid": "ab2e9284-9285-43a4-ba45-2df492d78cfd", "value": "T1E553E819917F117F7917D8D03BE06B8331D2201FD76AE8283FFCA2504F19DAA9A81B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770272350, "uuid": "5b793f05-b0f3-42ab-a8f4-8c20262f5e8c", "value": "1536:k33x2Kyz+7T4iAGoNKp1sIFObJ8FboJZI9:k33x2hLieMPFQ84I9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770272350, "uuid": "44771de9-350e-44bd-be74-723f997c05ec", "value": 60810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770272350, "uuid": "1befffff-8be1-4f97-a494-65e74072ddbb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56ef083d-025c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770273104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273104, "uuid": "e4f4a81a-2ed4-4270-9211-ae41b720d7ea", "comment": "Malware payload (Mirai)", "value": "786dc7bb35c77d4f529276efc98b52c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273104, "uuid": "a836595b-0263-4417-ad4c-20e360b51ed9", "comment": "Malware payload (Mirai)", "value": "c3e6904497f6a020592b1b1eaedcec7f0803e9eb5f522ef820d703c49a2a2be8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273104, "uuid": "441b9798-d23d-473f-8879-a1b11e7b9052", "value": "T167744AA1B91EBC76E3530D3FC14215147A3DAE40AB02D916B06E62656DFF2C21FA73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273104, "uuid": "472d99db-437e-46ca-b2fe-03184f1004ab", "value": "6144:e5VZLMTTd6DFl3VgEVUHCFjaN2vfo/5C+6uedSFG7/qf/08rl:e6HdGFRVTHfxL/qf/08rl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770273104, "uuid": "9ee315b7-f867-4c4b-b8c3-faea88e84d47", "value": 343452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273104, "uuid": "9b280f7d-0771-4d12-9031-2ed0647c7b9d", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f8f30df-fdcf-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770273790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273790, "uuid": "109daca7-6438-4e7d-9d41-ac84351fb5c5", "comment": "Malware payload", "value": "c889498442f702b0a9273303635649fa", "object_relation": "md5", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "triage", "colour": "#036740", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273790, "uuid": "0f7e2dfb-9193-45d8-b2c2-11c988766629", "comment": "Malware payload", "value": "3ccd84c6fad4189bd2b127e6eddbb6a8b7a0dcf8dd5cca203003983d34cbf81c", "object_relation": "sha256", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "triage", "colour": "#036740", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273790, "uuid": "43fe706f-3c0b-45f5-89e6-48c001a1c5ad", "value": "T158E58D728203FEDA576A8DACC45039006C89A4679B1651A8BECC13CEF19F598DEFCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273790, "uuid": "c14feeac-3297-45b5-9ee2-0afedcef4fdc", "value": "49152:8UixbItdTrJoFVPMvXGzOUzm3727E43cnF7h:7iBI/JoFdMPGQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770273790, "uuid": "6bfca4c3-d380-410e-904a-3a9a8d78939e", "value": 3203932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273790, "uuid": "40b252a5-e980-4cce-be31-e56b01e45d9d", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90c2ec3e-e1a0-11ed-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1770273791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273791, "uuid": "f050ec96-cc71-41ea-ba7a-8c36e564877d", "comment": "Malware payload", "value": "fa24733f5a6a6f44d0e65d7d98b84aa6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273791, "uuid": "8bd73e3d-2699-4d93-a2eb-6d45e9102014", "comment": "Malware payload", "value": "da1b144b5f908cb7e811489dfe660e06aa6df9c9158c6972ec9c79c48afacb7e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273791, "uuid": "86d9a02b-16c0-4eae-ae02-a149a64428f9", "value": "T1F7269D30364AC52BCA7715B11A6C8AAF91197F750BB254C7B3CC2D6E1BB49C34632E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273791, "uuid": "529e3173-3eb7-4b19-b8fd-39f5afc8e3b8", "value": "7c194251e86188363a60c4bd78b0d506", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273791, "uuid": "6c630f7c-8cf2-40fb-82d5-9fe10572add3", "value": "98304:5YoIz3Q2HM5Qp4WzMIaX8/BG6v/gIV0sba5mFkDzLb:5i3QDCpQaJGkDegFwL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770273791, "uuid": "2ebee3bc-0077-4699-9540-b0e9adce628e", "value": 4724720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273791, "uuid": "172aa91e-3678-4a8a-a5b5-bc8c1cf87d84", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18f1ab28-025e-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770273859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273859, "uuid": "a3f0f9fa-9412-4e2f-b361-e1692c5e91b0", "comment": "Malware payload (Mirai)", "value": "05f92f6ff904314031c6bd7fe9f80d4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273859, "uuid": "31ee5646-2270-41bf-bf31-ebb2c3cc641f", "comment": "Malware payload (Mirai)", "value": "3ef8cc9990a2c6fe8930f1661292d4946cfb728870a915a059d1f6870c490087", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273859, "uuid": "48e88eb7-b3f9-4405-8923-cb746d467f13", "value": "T1EC0412D5EE2593D3CAB03DA29E0F270911C6497C222228BF3C193EA4A5A655194F7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273859, "uuid": "7324d262-8855-408b-a352-a027428f2d5b", "value": "3072:lBcXIPBEjJXnd4tskE59sYW4MiYbcWFlm8CjQneWw/3gTLsnRHir1Z4/6T7/Z8V:vLBK4JE5JiFgjQeWwosnRqZ4yTN8V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770273859, "uuid": "7414f3b3-c95f-4794-bfb1-66c37088805a", "value": 173180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273859, "uuid": "23c17042-21ea-4ce6-b856-14d325302e8d", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "411ee638-025e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770273926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273926, "uuid": "f46c8a61-a0ab-4e36-8a5e-94e53db07002", "comment": "Malware payload", "value": "feb73a3ed95494a12b9826abe6da5330", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273926, "uuid": "8fc17dad-1d2f-44a7-8fc4-7506f240db92", "comment": "Malware payload", "value": "6cdba823e5cb492c618fe8ef9b780cc11e5361d6919d3fd2018ba99e1e185244", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273926, "uuid": "e602ee0b-a55b-4f41-b656-cd3738b2baa1", "value": "T1045412E6FFF64A0159A0122DA8CCBA2083DAC95CC5C1D5B74877CAA45F5B2319E84F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273926, "uuid": "ca66a35d-42fe-43dc-898a-ab3816a2a177", "value": "6144:/h18dh0Hw6LqQ1jL2AXDWmO0iTStaLcOmhK63TTwXxA6O50:5udSH5LqQhiAXDW7P8acOmh5IhA6F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770273926, "uuid": "b63cf42d-567d-4f1f-b469-e386c3776116", "value": 283720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273926, "uuid": "4fc48dde-fd84-421b-bb4f-682c61c68879", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fb8ad2e-025f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770274407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274407, "uuid": "c7279723-18c4-4236-9b0a-59f0243f10e5", "comment": "Malware payload (Mirai)", "value": "0f150a5356ac2876a94421b7707cda16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274407, "uuid": "8f2c8676-8e22-4ed8-b9e3-7488a5f1eaae", "comment": "Malware payload (Mirai)", "value": "26a534d1779b556b747fbe2cc7b5bf30cb21e3eefc70df60b4124135009ce6c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274407, "uuid": "7192c8de-fc5c-491e-99d5-3ab90da8a5c4", "value": "T165E3137359E8988ED3BC3D79C698A90977C0B6C62E6306EF32775B85C8F81ED4540A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274407, "uuid": "ed23e9ba-ae82-41e9-a11d-e56e9282f369", "value": "3072:L1UO76Cv2URoDHlKpJXaXIJA/Wkx1gUHLpjdsCDt402gh3ZI:L1U4v1RoDFKzKXIJA/WcXpjiedZI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770274407, "uuid": "b9473b7a-62a9-4c02-ae40-eaebae535f39", "value": 149196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274407, "uuid": "90bec57b-719b-4272-b627-ca07dbdb37d4", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d9d4fa2-025f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770274484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274484, "uuid": "82eca7f7-2d77-4560-897a-5055f9b656b3", "comment": "Malware payload (Mirai)", "value": "ee077ef07a8c6051c892b2acfbe2f224", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274484, "uuid": "9f97f289-d25d-4860-8890-f4e295da2399", "comment": "Malware payload (Mirai)", "value": "844bea00cec0850abce1c02151cf13edfe1e4ef986d27ce8e509ffba23562c4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274484, "uuid": "1de60ae4-8750-4c81-a8fd-5d8bbc448f56", "value": "T15FD31399BEE1CED4C517E8F4C5DEB13C41CD8286B4117B87AE1BA54F28C00DC3A666", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274484, "uuid": "d6fb37f6-6e41-47e4-92af-682849075015", "value": "3072:Ltiv4y0ou8LiS0cnghEvchl3kqvh5jIZcLEc2w5o7uUAVC5YO:x4xM8oR6ch+ovLEcXo7uUAE5x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770274484, "uuid": "947fa184-5a21-40cf-af91-03e6a0f0770a", "value": 141256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274484, "uuid": "10d4a62b-6a6c-411f-beaf-1bbda296775c", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "121daeb9-0260-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770274706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274706, "uuid": "ced1e6fe-e235-4682-8a5d-fbe60e44c79f", "comment": "Malware payload", "value": "c693904df73aff14e9066428eda3578a", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274706, "uuid": "4db75379-9858-4083-a85a-d6059afb71ef", "comment": "Malware payload", "value": "2457cc38af7515d3b0a80204aa60d98121e9106e874c3b06b0c182f243ed67a6", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274706, "uuid": "7a3aae5e-0a3c-4e05-9936-e3e23359b4a4", "value": "T143339119927F117F3517D8E53BE16B8332C1202FD756E8187FFCA2600F5ADAA9681B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274706, "uuid": "334be808-0365-437e-a28c-2dd3f1885ba7", "value": "768:e7XFlFvFEFEZuMqt6/IOZe621yZzCHoU1N/lESnjlC06gn:kX3x2KEMqt6QOZgy+nn/+SnjlCVgn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770274706, "uuid": "149de4dd-03fc-4fa4-a33e-be828f40700e", "value": 53617, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274706, "uuid": "a5689dc8-f6c8-469d-a6b6-6a5af6431928", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c6e0d45-0260-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770274777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274777, "uuid": "35ef3d40-e37a-47d0-aa4d-8f8ad05aa2a4", "comment": "Malware payload", "value": "27bfebe23630ff1153ea8a01962d8c61", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274777, "uuid": "cc9baa97-eb25-4b70-97ad-79e4a33ab795", "comment": "Malware payload", "value": "55fd811ed25c1868f638133f0c98a2fb8c23e6d84cb19e6e624bad6155b5b925", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274777, "uuid": "3ab685e7-1f9c-4e0a-86cc-d1ce46e35e23", "value": "T13334CE7A083C5A932CA05BD153D04B0CE76F9ADA30D0768DA24A6E7F75FB51C4A1CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274777, "uuid": "90e31162-44c8-4bf9-bc25-0ed0176df229", "value": "6144:y5VQO9GIa8J7OY8GGAhKK+2IE7NTvNsCygnkOh4wd:y5q6GYlBGAhKX3GTvigkc4M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770274777, "uuid": "5641af4e-ed77-438d-a759-9227ccc6c447", "value": 239681, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274777, "uuid": "dd0abaf8-43aa-4f9d-9afa-43770e003874", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd1e6dea-0260-11f1-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770274993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274993, "uuid": "447a43f4-8fcb-4544-b4bd-fd3ad7a489de", "comment": "Malware payload (CoinMiner)", "value": "c9cd419f39577624ad01f31c1f0a7222", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274993, "uuid": "295e868e-794b-447b-b8d6-f25e2c949046", "comment": "Malware payload (CoinMiner)", "value": "acc3ae2bbd373453eb849c22e2acc4e14bc9ae2c0b3464d8215c5eb3935f863c", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274993, "uuid": "1724fd1a-0493-4831-8da2-f3ba5cb9746b", "value": "T1ACC312BDC938B83BEE88E57F634C18FB7788D8886D48A13492C2DD4C76A3203565D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274993, "uuid": "6fe0fd2e-37e5-4d77-b32b-bc968662dd75", "value": "3072:IeXo9oN7/RlC53GO+2RflOnyDFr+WaouIGTUNL5vD:xdplC5/ph5vxGuL5vD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770274993, "uuid": "60ca5c02-5ff0-4944-a777-139630d99bf8", "value": 123072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274993, "uuid": "53d18fac-236c-45b1-9f77-704bf2cd20a4", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0542c8f4-0261-11f1-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770275114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275114, "uuid": "93dad21b-3fc1-4b1c-9b11-41240b6a4f60", "comment": "Malware payload (CoinMiner)", "value": "ad497f97a719c13c83f257b356ec0381", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275114, "uuid": "cf72fa20-af6a-46fc-92c9-f98ee3067f38", "comment": "Malware payload (CoinMiner)", "value": "01bf6c3bc93c0e9ca14b5cbeb91fc445d823a923c18f939879121a332eaa2458", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275114, "uuid": "fd17b8f9-fbed-48a0-86d4-376038876d3c", "value": "T194E3129B4BB9DE2DD219527610F8A03A3B847ED8B1D1D3C48DC53E084B737DB216DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275114, "uuid": "869c334f-3f55-45b2-b96d-faa79e710387", "value": "3072:VwoJmSgqgNPU1TZWkDH0GwPlOhePzfmHnPYQ8+PinXhWfaTSEbt:zJmSMNPU1ld9fhePiHwQJinXegS2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770275114, "uuid": "0b29f6d6-2417-4d12-a700-a911ab174730", "value": 144924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275114, "uuid": "8bf03a08-b2a6-4327-bb81-0e27b2121315", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4262fb7-0261-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770275408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275408, "uuid": "35b8eae1-9f30-4b09-a83d-4326ecea8f3a", "comment": "Malware payload", "value": "87bcc67edecc5e8806b6cd16e579aea3", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275408, "uuid": "34e7a1f7-283a-40a4-946f-39c277ded1bf", "comment": "Malware payload", "value": "bbc7a66f47bdd79c125ef2943dbf3bcc3baf59c703dc4b440aa1e2e23f2a22fe", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275408, "uuid": "37ff4e17-2c05-4ef1-bb44-ef4e5511a94a", "value": "T1CE654237AB7810509C7C5D27EA505457BB4EEC6B95A2610C3E618BCDDBA086EC2B7C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275408, "uuid": "227c83f2-820b-4ce6-bc01-ce1878682705", "value": "192:QshgXf1m1ppFuE3Dg84UHcq0o9SXHUoNm:P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770275408, "uuid": "3f12daec-2957-415d-add3-0bc0e57d0f68", "value": 1492112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275408, "uuid": "f05405a1-fd57-4073-b7cd-fbf72d309b9b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f2eaa6a-0262-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770275775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275775, "uuid": "5c5a0076-7d75-476e-82c7-54124ed6cdd4", "comment": "Malware payload (Mirai)", "value": "04ad2fcc27c585fc670f13e361b0b57a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275775, "uuid": "13617243-d1af-4bde-95ad-6fc97f8bb4b2", "comment": "Malware payload (Mirai)", "value": "0a2c5c89de3bf14a6486af7018fe53da2ec6e23ef3eef464908808d9d5f4f904", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275775, "uuid": "da07469d-ebd7-4a90-bc2c-c7803a22b5a3", "value": "T10CC312F6B2830CBBE23C5532105DBABBDA8FD31521911D617E02C833A9DD1B4692F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275775, "uuid": "6fd0d707-c64b-4054-bdac-2fce07813239", "value": "3072:wACISXtPM7HN7rl6L1w1vafJpOOTly2+B:3CdXCD6Zqv4UOGB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770275775, "uuid": "a0675b1c-bb4a-4713-ac58-60dddd947636", "value": 120404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275775, "uuid": "522d98c1-54a4-4e1e-9839-40843bca9b6e", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aee53b0a-0263-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770276258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770276258, "uuid": "ae49f194-3af8-4a36-8aaa-17b2001e82e7", "comment": "Malware payload", "value": "03eed99dbecea0369e05580423df5c64", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770276258, "uuid": "be8db11e-a4c2-47f7-ab09-b14fedfa89b0", "comment": "Malware payload", "value": "1e930e0675e0df27aa5f13fd40e1b6abbf76f9295ae58a335482859da7f06d17", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276258, "uuid": "d68dee3a-3826-499c-9a63-1396a215c22a", "value": "T1E114D994FB2C912F86F62168151F464A763D807668484CAAFC68D9E4F8F0D0B527FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276258, "uuid": "ab5bad0b-7e8c-4382-a9c1-78f4c54f5175", "value": "3072:a36RTOPg3Z+esPGyW8ugiKsOc2P3xsQbKgNrsjBIXW05e89FGgEc/SLkxPjMwVwS:3J6LW8utVQm4vGgEc/SLk2wnUM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770276258, "uuid": "1a5d8b66-811e-4e3c-83fc-59356c53a747", "value": 208039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276258, "uuid": "a6a2657d-3039-4864-a15f-4ddd7a7de8b6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5a11ee7-0263-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770276323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770276323, "uuid": "a955f047-f07a-495c-be1c-439dc74fce7a", "comment": "Malware payload (Mirai)", "value": "ebb447980fae3a880a30f84087776b0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770276323, "uuid": "c1cf28bd-8810-4204-a4b6-9998d99f7987", "comment": "Malware payload (Mirai)", "value": "091f2e8fff8bc8d83ec45640aeb6e12491614b577224cfe1813c7cd8a3e19474", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276323, "uuid": "18deb3c9-b5d4-4bce-bf13-e8d3378ab11c", "value": "T13E0412696D10E9A6F3F92DB09CC015BBC8EADE7C477CCC945CA17692DA384FC205C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276323, "uuid": "41e3bf67-1634-4876-8b5d-e5e16f2eb4c5", "value": "3072:CHkRgjKQSsXhcfuk2fZocFwQZQ7so+Fo2mPY37Hvv8qIlVpeMoN+P:KjKoXHXZrFwQZqmoY3bEqzMoMP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770276323, "uuid": "b8adce77-1465-47b6-bda5-4a4f7f6f4919", "value": 175608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276323, "uuid": "6df749c7-781d-4b18-8cb0-fd3e06066cce", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a0627cd-0264-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770276626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770276626, "uuid": "bd26141a-37a1-4890-82ad-c0bfe71edf84", "comment": "Malware payload (Mirai)", "value": "8f7d6491ccbc06509ebc6f1df8cde42f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770276626, "uuid": "7c9c5830-2a4d-476d-af7c-2bb9990d3a07", "comment": "Malware payload (Mirai)", "value": "cd63d2c525640c298ca8397c26fb71665166455f76f11de8b8663a4959ed3ea2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276626, "uuid": "a8a0f77a-33c9-46be-a236-54aecc742175", "value": "T1EBC423FF11A2D28DED4F393D269FA188D07D88725A89C496262E5DBE0A3C7005747C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276626, "uuid": "506a636d-c68f-4cc5-89dd-6641a35af33e", "value": "12288:mlI4ktS73l73oSjbGIT8XC1xP8hwjRPzJl7QTWnL59/izRuP3sd1qXYKSO:m+W2SjKRS/lj5HLK43sArSO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770276626, "uuid": "bfe0e1e1-2e77-421f-a519-d58aba0435dd", "value": 580200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770276626, "uuid": "d2aec1c1-4d15-4259-86d1-cdb5268231da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "591df085-026a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770279121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770279121, "uuid": "3bfcc07d-d9b2-4dc5-b9a3-60f2a82c452b", "comment": "Malware payload (Mirai)", "value": "5ecb44791c2cacfda3f17355c575285a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770279121, "uuid": "bd689b6e-e08a-4d91-93d7-d9becfa78c3a", "comment": "Malware payload (Mirai)", "value": "31fc714879a158c172fea60ba2c6a999a73442c88db697328a2fd5d1d00463fe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770279121, "uuid": "5237eb9c-431c-448a-9a1f-7ba4ce5a0461", "value": "T1E5B3E085B210AE55C02272FCB1870A90D3B16E7B4B9A150B44B3F5B46DBCCD47E1BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770279121, "uuid": "1dce8f31-65ef-4e7e-a0e3-0e71f9047ba2", "value": "3072:X5Apzl9NOvXoVLAE375lhYy5SkOXNwuc:aevXCLr59hmNwL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770279121, "uuid": "0a6ac4eb-1805-4c89-9107-19b2f063e600", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770279121, "uuid": "ca8f939a-fd8b-4b79-b13b-f3147f2fc536", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df66ad87-026c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770280205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770280205, "uuid": "3a534274-a8e9-48b4-80ff-2584b62d5739", "comment": "Malware payload (Mirai)", "value": "dd1392851914734c2476ee9e92a4f2d3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770280205, "uuid": "9772afc0-69de-4ed6-9d8b-7ebd6781be19", "comment": "Malware payload (Mirai)", "value": "48cbd01d0f113117cdcf8db93cb5f2e8bd0af3c37a920484d5cd9818eb2d95ba", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770280205, "uuid": "e64f68f8-5df3-412d-8887-ee9f4bd462b1", "value": "T1B25301A150F5B46AC66283F151148F05228BDA927B02CCDC34DA132B6C9FF9F5F95A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770280205, "uuid": "16e8765e-f393-4936-ba10-a071d12ffc2f", "value": "1536:LznwRRM10ac1B010ZtaS4SV/zQUjsPwttl6CA4Lkg4azHU:XrREB5taUVLQlwtt0YLGazHU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770280205, "uuid": "3b62ce3b-24bf-443f-b2d1-b89717b3b14f", "value": 60788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770280205, "uuid": "29a55663-10d4-49c9-b1d5-4ca1d57f1d50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dda1e01-026d-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770280497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770280497, "uuid": "18a2d9eb-1693-4a25-86c1-a5be6f2e9fc3", "comment": "Malware payload (Mirai)", "value": "c191632b6832a799aadd5e99f0395513", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770280497, "uuid": "d9545e92-390f-4831-93c5-55f688b70b72", "comment": "Malware payload (Mirai)", "value": "45547576ea8c148ed259a7ad5529b4554f10042cfe80193a205a1764468f3644", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770280497, "uuid": "ad9bd2f0-8f74-4631-9c86-3a37626d5282", "value": "T14B148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770280497, "uuid": "68333d6c-ff9b-4906-8eb4-c3c70216eca5", "value": "3072:BcHZcggFy1tJmajThwnKBDMOzsjJjL1lCRuUKG:BcYFAJ9/hjzsdjy5f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770280497, "uuid": "2a93a46d-f242-41dc-84ab-f8cc7ccc9df9", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770280497, "uuid": "b0df43e6-684a-43ed-a233-a4a4c2e76ac7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b85fd10-026f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770281353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281353, "uuid": "97db1988-e2eb-418a-980c-41f0ac2a09da", "comment": "Malware payload (Mirai)", "value": "fd601f31ba4e4afd775a43d64b85aba8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281353, "uuid": "520c75f1-90a1-42ef-bee8-b71e9f830f14", "comment": "Malware payload (Mirai)", "value": "cca6f221d624da33dcba1107fbfd8b965dde97e8abf3e84a0e3ebf9c46989ce4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281353, "uuid": "ab1f5b8d-04b6-41f1-9211-c98cd27c159a", "value": "T11E146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A99772256246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281353, "uuid": "aa349d7e-f42c-48a4-a3eb-c6b4bfb54925", "value": "6144:zNROm5155gL6mTX7zRR1Lwt8Al7IKTtV:XgLnLzt0ll7IQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770281353, "uuid": "37180fe2-9924-45a9-86e6-af0d388c8c18", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281353, "uuid": "0af40845-3a73-4b34-897c-5078567f2c68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98f49a15-026f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770281375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281375, "uuid": "ecd79193-f0fa-4afc-a58a-043f0855c681", "comment": "Malware payload", "value": "143a6059c7aa638d8e6248f744db8575", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281375, "uuid": "93d23107-8f9c-42f8-8985-38825dc04dac", "comment": "Malware payload", "value": "1977061e6372841cdb5762fb9f177efe2e9bbbb4603fc1fc66b2880f9c4ae5a2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281375, "uuid": "95264196-c226-49ff-bab9-83223fe51ca6", "value": "T115F51111CA45CD65066C102524AA5E8B25500EB79C4837BA3FAF4F8D1F1FA5FA1B83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281375, "uuid": "c0fda7e4-80be-4606-8102-0404bce2b838", "value": "49152:/NS9VdNlB8DqqZU3fLesfJGuFXHf/5+IJx3prB01ENsZ:N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770281375, "uuid": "25be3b48-ab01-4a95-9f5d-0fff563a5d5a", "value": 3590481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281375, "uuid": "d22d4ad8-b557-460f-8a3e-e0540868a21f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eac27964-026f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770281512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281512, "uuid": "8cfa7f09-c3d3-4683-899e-505338ac9f08", "comment": "Malware payload", "value": "383594e0f467da86a41fbabfcffcde58", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281512, "uuid": "79410be1-8b07-4244-8900-96626691a423", "comment": "Malware payload", "value": "daa59baadd45351a2127850396387b713a06e1de3140ae3282da858a66eb6cb8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281512, "uuid": "fe6fcdeb-e447-4e2f-b40c-70bdd14ed7a5", "value": "T193359EFA44093468EC0634FD24AA7C03D23FA5557BFED93302B95136290FA585BACA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281512, "uuid": "95e46972-7d35-4019-b677-48c452d52a01", "value": "24576:s3aMndOwHfQYkmYr+oHB4IotFEtviBr4nmw7mpAX/o9BHJ5t:QvLDE+GBCFe00dSCkRt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770281512, "uuid": "9a71d30d-33ed-4ab2-9be1-601900d9a180", "value": 1136942, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281512, "uuid": "7c2fb79d-33fc-480a-92c8-7e22b59a8539", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bd9498e-0271-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770281997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281997, "uuid": "cec7e410-d191-4311-af29-82a2efe0388c", "comment": "Malware payload (Mirai)", "value": "733200cef5f66f170a9854253ada7cb6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281997, "uuid": "8622f032-413c-4add-9b96-aa41c243c9fc", "comment": "Malware payload (Mirai)", "value": "3efcb7ae91d2b5a4cfdf7c6fce6a87bc5c77afd31568ed83e6717cad3483b62c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281997, "uuid": "d3db8b0b-54ee-497a-b0bc-32cb5460bd2a", "value": "T11353123712A5902DE075CA374B5CCDB5837A82989B20465BE97EF5BF2E41E05F090E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281997, "uuid": "844fe3a0-6c08-4ac0-a709-5cd9940c4f8f", "value": "1536:zoZ/Yzn9l6maZh7RybbM6EwryUxNW78z77SsheZjgeAQl:cSn9jaBybw6E4yUu707bheZjSQl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770281997, "uuid": "5f4451e0-7a51-436e-ba48-2d06d0d1d3fd", "value": 63912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281997, "uuid": "79de23bf-5347-40cf-ae41-dbae562fbb28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65f3810f-0276-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770284296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770284296, "uuid": "c7d53ace-355c-4c03-bda5-c315d336ebb4", "comment": "Malware payload (Mirai)", "value": "2a9785e9adabaceac905617c9091bbd7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770284296, "uuid": "2babd258-1f8e-4214-84fc-b8ac587a7528", "comment": "Malware payload (Mirai)", "value": "7bb537fd7bcdae2fed29412080a78d4f0d6ab526c6219cd40b8e78ad040ba811", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770284296, "uuid": "ad9d1e04-28ea-4b36-ba39-457ecac60ef3", "value": "T1FDD3CF32E0086DA0DD2116B4347659BC0340DEB40BD59243EFBEE59E28B7DA57DEDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770284296, "uuid": "531121c1-b9d1-481b-bc53-51aa2c2289e8", "value": "3072:kNulV+GOAc3YSmDEjdX/VuHVv3WDRGGRhaUNZkP0Zoa:yulo2ubIVv3sXL5NZmOoa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770284296, "uuid": "9362ca05-8d96-4c91-8480-3f971aec9fcc", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770284296, "uuid": "39ba8d54-baa5-4132-8645-27dac44a20b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90bad933-0287-11f1-8b2a-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1770291669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291669, "uuid": "abbca411-1c6c-4112-a037-7e3c722220ba", "comment": "Malware payload (SalatStealer)", "value": "c82e8d92dcbf761d1f370250b10d4fc8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291669, "uuid": "4715800b-9635-4db1-8fe4-3590fb62897b", "comment": "Malware payload (SalatStealer)", "value": "44e7dd8533d999a94931470ae4c06787740719a0ddd0453574f6cf2de9fbc085", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291669, "uuid": "d2fa325c-e7e5-4de7-b826-627b62707bab", "value": "T1A756127372CBE47EE42E073644B7916908F7693A96626C5A82F494ACCE311711E3FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291669, "uuid": "35c75849-44bd-43cd-ade6-7182c3937d10", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291669, "uuid": "085e5373-9655-482f-b5b6-7253fcdeb409", "value": "98304:Ur7QeWfKAbVPdDOTmdl5ogaUwSQE5j5O1fxf5nXd60H12Y58LdOfwY5xpwB1J8iH:y7QeWfKAbVPdDOTmdl5oga3G5j5+fxDY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770291669, "uuid": "21767683-61ef-496a-9abf-36e62736e3c1", "value": 5936419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291669, "uuid": "4e4d294b-d7a1-43e7-900c-7197e917ace5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc9e0fba-0287-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770291797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291797, "uuid": "24187336-d9a8-4dc0-adc3-63c4ce9f5171", "comment": "Malware payload", "value": "6ee3c2d5525c121291823270ac1c1a82", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "stage2", "colour": "#ef47a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291797, "uuid": "e8f4dc7c-79ab-425f-b18d-81d26ecf202d", "comment": "Malware payload", "value": "e979010681c10f311268a410cb829a29d4fe48425ee093c1e0a2a283a954dc20", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "stage2", "colour": "#ef47a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291797, "uuid": "2d2610e3-89d2-4e88-8022-8b911dbb3e4f", "value": "T185F264A31698157F1A3782DC9935370DB893051FDEB2CD52FCEC4C297BAC66238259", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291797, "uuid": "a6e96936-d0c4-4b7f-be95-ce205746d877", "value": "384:NeEUozqgsFo88pWymiwMqlmMYe4m2mQYvNj+/7un/nf:RUOqXFiwuMYE5Nj+kff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770291797, "uuid": "ac3e6262-6bf6-45b5-b2c1-8b8487d631a1", "value": 37084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291797, "uuid": "9acd2ae0-350b-4a7c-9b23-cb214233e5c1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48a5ac07-0288-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770291978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291978, "uuid": "b3ff71cb-3b7a-4556-8e2a-97c6312dcdb4", "comment": "Malware payload", "value": "65a4a8a24fbd9cd7585d3f843be9210d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291978, "uuid": "6763204a-d434-407a-a311-f046e1fe4a72", "comment": "Malware payload", "value": "976e3772ffea7499f7c119e956a5a71806f8f054caf174978fa888b254dd22a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291978, "uuid": "aa028c06-eb8e-4973-b46e-f45150510334", "value": "T1666533CAD6ED5A4184EC5F3C71B03A877510F36311FF24DEA808DA72567E4252EB82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291978, "uuid": "154bf536-ad1a-4e44-b845-8950676ad7de", "value": "24576:DgYo2+3cq++VvXi/JbMncb6mgaxGejnsj1wmvn8i0Z0Vntsmkv:DgYAcq+gvq9MvjaxmRKiI0VtsmS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770291978, "uuid": "af104e5d-3b49-46b9-8e74-c6bef0d544b0", "value": 1458464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291978, "uuid": "7d8f1dc8-c098-432a-9c99-f66f618e8682", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77523479-e19f-11f0-9c99-82aee05be84a", "comment": "Malware payload", "timestamp": 1770292328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770292328, "uuid": "851e3688-a530-4083-a330-fb8fa51740e3", "comment": "Malware payload", "value": "ebbcfb749a959fb53e9fc8b6dc915838", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ArkanixStealer", "colour": "#e0ae21", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PXRECVOWEIWOEI", "colour": "#46EDF1", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770292328, "uuid": "b1f90405-c830-48a7-acef-3db7b65ee46f", "comment": "Malware payload", "value": "3f4c3c16f63fb90d1fd64b031d8a9803035f3cb18332e198850896881fb42fe5", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ArkanixStealer", "colour": "#e0ae21", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PXRECVOWEIWOEI", "colour": "#46EDF1", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770292328, "uuid": "3e0b905b-165a-461c-a0dd-2f3cc2831366", "value": "T17D9501321243BD9FEBAB0FBCD28236980C393D572BD155D8B6CC469215D5AD8CEAD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770292328, "uuid": "59327fe1-b103-467c-8d66-35e80f5c6f4f", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGC4yczQDBoi0Ft:8UixbItdTrJoFVPMvXGni0v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770292328, "uuid": "8ccd5732-c088-4cd3-8134-c3da549ee43e", "value": 1969672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770292328, "uuid": "bba2ab1e-d3ae-4bde-b466-061524595b92", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22f2fe40-028b-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770293203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293203, "uuid": "cea7c56f-8475-4150-a354-6e9bda08b5f7", "comment": "Malware payload", "value": "a42ed7a2021eaf657622594685d11af8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293203, "uuid": "68041f5d-81e2-4272-a206-20622d38bc72", "comment": "Malware payload", "value": "a37e33cde857263f7cdbb0be597628a333a08f7743da3ceb023883dc656862a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770293203, "uuid": "ec6e2028-79e2-4801-9329-db115fc1b965", "value": "T1BBF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770293203, "uuid": "f3113306-374f-4228-99b0-6ef1a63990cd", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas04:aru8GPLMWLasclH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770293203, "uuid": "57e74323-24ff-4ab6-a07a-ab072f417792", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770293203, "uuid": "f14d4fe0-78f7-42b6-b8e2-108a168db31d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5db3d9f-028c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770293906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293906, "uuid": "f63e887d-5a44-452d-9710-fb08d81c1450", "comment": "Malware payload (Mirai)", "value": "885e5c9141a4a988df67166c4a66173e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293906, "uuid": "158631a0-5aaa-4494-a168-05f97137f667", "comment": "Malware payload (Mirai)", "value": "6a878f64c541f29affab51a61b2116a07cb42fb1bb2a71f9416178b766d3ab9d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770293906, "uuid": "cc2604a7-0465-4b44-9a4e-7a4f61462b43", "value": "T17F73022B918F4AB3C1E99C3370077B34AF79A063D8E53B05FC91D045F91DDA262846", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770293906, "uuid": "de6708c1-30ca-4df6-9f92-584a83f46595", "value": "1536:mOlDJ9nqHLw+ZQeuFvQfPbYGiNw7VI/rW0wvnEJ3gzE94e/ohAkNor7:9pn40+ZsvaTYbeO/VwP/zE99/ohrNS7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770293906, "uuid": "30de3677-267a-461f-a58b-2b1e53e8b3e9", "value": 74732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770293906, "uuid": "89c085b1-b7b4-4e26-b5e6-748cea42c9a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3301748e-028d-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770294089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770294089, "uuid": "bf3b7114-da1b-41f0-9851-bec192ccc415", "comment": "Malware payload (Mirai)", "value": "1da9c6dd73705550d79d504f45c85b66", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770294089, "uuid": "f94c1b33-dd1c-4add-bcd8-d3547a9a5b09", "comment": "Malware payload (Mirai)", "value": "492d0ec2ba5e7a0281867433dd34b16c1f9d974d91446aaac4df40498f11ba6e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770294089, "uuid": "9acf2a41-e048-48f0-a693-c9055f7a67af", "value": "T105B3AF87B1907ABEF0A45E3FC4135E26E6259F705583273D71BDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770294089, "uuid": "02f3518a-820d-4d09-bf9a-3c863650e7c2", "value": "1536:toOxCg+uUGWkCqYUqwaJ1XqfXg5AcS5blaZeCtjHXNLdCS2T15OvhSkzf8rSx:t1xKlGWnqTUcXgZS5gZ7CSXhSGUSx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770294089, "uuid": "4b7b98f1-c0a0-4cf9-9f26-63529ef4b8b3", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770294089, "uuid": "965ea4b0-fbac-4b76-ad10-07a59a1bc065", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61ea9cb6-028f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770295027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770295027, "uuid": "b0b9caee-9b5d-497f-b5f5-eb64749dc221", "comment": "Malware payload (Mirai)", "value": "aa11154a63b97cd3cde4132abd642beb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770295027, "uuid": "81f2bfa9-05b0-49d2-9adc-78802360d032", "comment": "Malware payload (Mirai)", "value": "2fe1419ef3068e4e8dea2f276e9aa84450981f630277983e7922d03b9d60bb29", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295027, "uuid": "3b0e3e0d-2277-4a37-b6d2-ef3ee284347c", "value": "T1356312AA6639BC6FDFCCAB789A5012BAA088D3D1F3B3551060DFC54D571522FD10CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295027, "uuid": "aa8f4cb5-17c1-483e-a339-1c0292c37507", "value": "1536:YVUQ0TcrWCT3gcHB+cyepg1k/zJhw7nWAvnQGUgJViXZjbh5j+Ny:ip0T2WCbgc8bm/gCAv3JwpjbCNy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770295027, "uuid": "f22b583c-e472-4266-be01-f1e1552208da", "value": 70436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295027, "uuid": "899755ae-0f7e-4f31-9e4b-b470b171c4ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4c3604b-028e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770295384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770295384, "uuid": "0953c5d3-1b91-463d-bb90-b41bd4f2ade6", "comment": "Malware payload", "value": "4e8feb271ce453aa46324a545e128d79", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770295384, "uuid": "1a69d00d-9718-4a23-b8b3-9fe6d180f869", "comment": "Malware payload", "value": "eff9db5aa4286bc6c2f62687739517afa64967c2c814617fcb3e7170d161ae1c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295384, "uuid": "0bcf7192-9f7f-470f-b3f2-0a992e0bca52", "value": "T1FA312B8220298488CD5C63F7FB43DA8181E0C7196AABA63FC37193752DC60E0A4266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295384, "uuid": "c6f45895-329a-41c8-9689-b34dc5209d80", "value": "48:9F4j9cqh3om/N0uil9TE5tCDWuntN127CZHYVkXB:8hYml3wO2tfMCxlx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770295384, "uuid": "88110ba9-04c9-4d3d-873e-2c33815c4d1d", "value": 1819, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295384, "uuid": "be651a53-f253-40ba-9731-622010d67cee", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74470d47-0291-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770295916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770295916, "uuid": "d350854b-1289-46f2-bc73-7bf893440eb7", "comment": "Malware payload", "value": "af36c8ec27835b9f55a823aeac1cefeb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770295916, "uuid": "b75d4edb-acf5-4035-a1f5-97cc598e11cd", "comment": "Malware payload", "value": "4da90b57f1c2639265686e72e51ba431ad9e97c7f54b3fc46b29a0c243977bc6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295916, "uuid": "98f8c68d-23fb-4bbe-bd78-db050ba2dd09", "value": "T17A31E94DE9792717F281833CBE835D424A30F748F1BF996691DB6990C945786FC089", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295916, "uuid": "d16a048b-f782-49ba-8e92-2a61dbc41af3", "value": "48:9Nug/7IatSByFSTFybYvSo/k/KNyAqnDgdTdw:/FEnKiFCYvTk/SqnDgTO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770295916, "uuid": "0c2dab63-df6a-490b-a215-3d1c4c5fcbc5", "value": 1761, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770295916, "uuid": "dbc1f106-8f07-40b8-af31-729aef9a32dc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28af4152-0292-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770296219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296219, "uuid": "b9d9d07e-6de9-476b-8508-059353ddf97d", "comment": "Malware payload (Mirai)", "value": "b66e804d32c0c5f0b5d3b4278de81c77", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296219, "uuid": "903a3ccf-556c-4ed3-a904-bcb2de7d2228", "comment": "Malware payload (Mirai)", "value": "e5db072968477e3cf14af94d5d7eaf825b6313b36a7403c9fb171c1873d7f97f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296219, "uuid": "73037e91-c47a-4482-8612-d198ae590621", "value": "T11B04392F258192F0F6411B746BCFD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296219, "uuid": "4df66a8d-bd22-471a-958f-6c08f6cf70bd", "value": "3072:7mflblbBDfvNUZem/LVA7bGQU66gOVNLddnNgRdgJi55w1UX9:7IJ5k1DVA2nDXNgEJi5a2N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770296219, "uuid": "7669673e-bdfd-4637-9f36-0fc2f13437a1", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296219, "uuid": "4cc4ef85-0812-4c30-a16c-d89b168c22a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d0bb3a3-0292-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770296361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296361, "uuid": "b6fa6e11-eb45-4a7a-bf6c-2669cc7a6cb3", "comment": "Malware payload", "value": "0152725da1f88f2150e4ff004150aa8e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296361, "uuid": "649b3919-7df3-492e-84d0-6f6c40b157c3", "comment": "Malware payload", "value": "8072a5a393fddb318b0ed366fa4b1ddac787c9652501a633b4b3feece2da5e21", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296361, "uuid": "f4cd8045-bbb1-4ff4-9461-469771baaceb", "value": "T1D2E3FA6F83F7313572138359F5A6A738966DC133EB410EE2F9B29A9C8FC11A101762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296361, "uuid": "150ef9d5-a455-4b08-bde3-6acfa3bfbc97", "value": "768:HZdapEbrcXlGRNjcXscJGcz74k/tHcTwA8KmppNsfifRf+VIrePfHKIYW7voFSnf:fapArIl4k2wImpLUIrU71F4BwhYT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770296361, "uuid": "ff11b27c-fc79-47ee-9cb8-5865fc741b03", "value": 153853, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296361, "uuid": "6c414584-d875-41c6-a3e7-9b26a949a995", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ba8eea2-0293-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770296654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296654, "uuid": "0dd608e1-20e9-42b3-b1eb-e34431fe35f0", "comment": "Malware payload", "value": "55678505993efae3f82d71e0103b5925", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296654, "uuid": "bab56c54-9849-41f5-90eb-54ee49f2adde", "comment": "Malware payload", "value": "1dd65ca48d16e27bca9392fd2a15faf19d2afbc44ade4ba6e062077b65fb226e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296654, "uuid": "f1dc9c48-6b50-4471-b903-90c9d288a69f", "value": "T14B34DFA5E8B4EAB9D0401F531C3D819EDFC1E74216099F8A16EF61453AD38F5EE92C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296654, "uuid": "e6a727c6-eabd-47ae-8eaa-3c9a754b1cc8", "value": "6144:xjyEv6Tor6331xf18+74kFc1ODGgSVyixLUbon3HSL:xOE6Tou331xN844kSg8/HSL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770296654, "uuid": "8096505f-1804-4c17-9cb4-3a8579957878", "value": 239690, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296654, "uuid": "b2ee2118-7174-4b2e-985e-5992994da504", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57aeed5b-0293-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770296727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296727, "uuid": "49b13995-f131-4bc8-807e-44de82b908a8", "comment": "Malware payload", "value": "adcdbdd52a94aa58238336df69d50813", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296727, "uuid": "eb0591e8-3d9b-4210-9275-1b4842b8dee3", "comment": "Malware payload", "value": "6f3a30cbd25ac84827c293b7e8d271ada4d7cf16c3113f3fa81085990210e05d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296727, "uuid": "6120851b-d3b8-4b11-84ad-ae6cc5dd05ef", "value": "T1113109885D6E0DDFF81B89BD1CC51C40CCE995C1914086CF0288B9689C4EADF1E6BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296727, "uuid": "a446cde6-cb61-4311-bc2f-ea78f209b6c5", "value": "48:9Myx5zZQ8kJFUw8qmZD7qAUgk2BKWXNBRb:OgZJqWDj1BVPx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770296727, "uuid": "cdb7bc9c-1fed-4a82-b5fb-8db36171a810", "value": 1828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770296727, "uuid": "2828ce78-7762-4758-9931-f8380d2af347", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15c01bff-0294-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770297046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297046, "uuid": "f506f522-883c-422a-95af-8a4be471730f", "comment": "Malware payload", "value": "890604e0ff943e766e1ea48ede0dde64", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297046, "uuid": "efa34a29-fdc2-44fa-b002-ecdcb6c9668d", "comment": "Malware payload", "value": "73333d023d7368ab6d8d9ca67b81ba308d0a3ec467c82c7a28153fdcb74e8dcb", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297046, "uuid": "28ef6655-7417-4a65-b790-b832e9e5e56d", "value": "T1D5310B19FA762C5AFA42C3BC3011CAB10F2C56059DB92227DE1503BAD60158B0B1A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297046, "uuid": "4a88ec7b-9302-41ff-8094-c6613b102bab", "value": "48:9GBe3PjDk/GqAkPgzPTBLYRkG/76gEAGfrxlJYo44:2e3PjDkh8zPTBsRk276/FzF5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770297046, "uuid": "78eacd08-5318-44bf-ae0c-e5a225366626", "value": 1825, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297046, "uuid": "0d5c5e97-ae9d-428a-b72b-fd80084e0cf7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69e1845c-0294-11f1-8b2a-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770297187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297187, "uuid": "80565ba0-c8c8-4fbb-bead-e9212747ab75", "comment": "Malware payload (SantaStealer)", "value": "3cf62d3c076e2fd5ed3d21a51626f517", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297187, "uuid": "815fca48-083a-4a33-a15e-131f451dcb01", "comment": "Malware payload (SantaStealer)", "value": "ce5d7e6613ee44ef8bef7cf10c54cbd082a8351174a4e1452340017e545ff88b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297187, "uuid": "a6a62b77-6909-432b-a923-f183b75a68a7", "value": "T143E533B6FB43B8DAD8D14535841501B75101AC232B864F33F6BC763A5FD2226BA739", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297187, "uuid": "c7215a6b-9827-4646-8f2d-e3ae33026fbf", "value": "b29f7bc6c3cf27ba78272829148a5262", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297187, "uuid": "16f508ee-18b0-4695-ac39-b687f83dd276", "value": "98304:708xwU1XYDUnCifDoJPGMEKecU0ND/DaMaBQZRr:45U1XLoJ+MEKeK5+MaBer", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770297187, "uuid": "bda31de6-752c-4e93-a057-3921db101a37", "value": 3169196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297187, "uuid": "7d463261-01cb-4a97-a326-45f0e14986ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "811785ab-0292-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770297273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297273, "uuid": "c66b3fa9-34bd-42bb-92af-ca1c3a932497", "comment": "Malware payload", "value": "7ba439b45f03a0b964d37f9942d63f43", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297273, "uuid": "d45a96c5-9243-462e-81fa-27bc743565f1", "comment": "Malware payload", "value": "1c23b5047b92e5cb9d8564590f834f50cb6f97ea48c79aec58bcec83ebdb20fc", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297273, "uuid": "fa67d4f8-c9e8-41e9-97b1-2c735921da20", "value": "T122312BBC6209CB19D805D8B37FA258B02FF8B84C4104CB6170E9702A74B678A5E328", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297273, "uuid": "d972cd04-3dff-4c9b-9a20-47d9921a48e4", "value": "48:94qrzXn98vEw/Wpk3TitHvqYzr/kSi9ooMm0FR7Q2nYiRgXu97:2qnn9+3+1NzR9RzFqcKXc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770297273, "uuid": "2c5ca672-37d1-491e-ae82-a88812e00fa0", "value": 1814, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297273, "uuid": "3e5dedb7-a094-42e9-9718-bfb56845592b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac9277cc-0295-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770297729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297729, "uuid": "36cf11f1-2f5f-4cd8-b50d-668ee3c0686b", "comment": "Malware payload", "value": "5bd633eae82fb2e225f9b77ddcd9f60c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297729, "uuid": "dd7268a3-ede0-4a22-876c-e35e55c9b7c7", "comment": "Malware payload", "value": "82871fee7b5884a2e5ca2c3ab96a2bcbc4f868fb3c6dfe2f9076e3449f6fb833", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297729, "uuid": "139980ae-e2dd-4c41-9938-92f705f8d56c", "value": "T1338308327588582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297729, "uuid": "c482a852-e500-443f-b496-0eebcfe77f08", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnqWacVN/:XEKltp9t2SX/yr2pbqW5VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770297729, "uuid": "3391f336-1027-4ad8-a18e-8c7d1597d7d3", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297729, "uuid": "2882abde-3b55-4b12-8b6e-1c786b9c439b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45414cc7-0292-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770297802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297802, "uuid": "afd8d3df-718b-45dd-83e7-586a8d45a3fc", "comment": "Malware payload", "value": "c6f6b49d99f7c8e2fb8134d2290a1af6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297802, "uuid": "577cbc6a-768f-4d12-bfd3-c88927ccbd2f", "comment": "Malware payload", "value": "918d37db97c78f7f5d40276c1cd2a20817c19b10b2af4c006fccbbeae22d56c2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297802, "uuid": "410efb4e-d1f1-4482-bf12-9e15b14e249c", "value": "T13531E94667020313FD4DF2702A95DD299AE4A14560F1D7A3808ED90D898F3640FFBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297802, "uuid": "68f7ce23-52c7-47f8-a41f-90bff53f6645", "value": "48:9h7UfCS/ASbUQNe4DkbHH2MqjsLi6qJH3P:fUfgOebbHH2MLin9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770297802, "uuid": "4df34b1d-9e72-4d2b-949c-44f14886eae9", "value": 1826, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297802, "uuid": "1f6b6df9-48d2-4641-a1e5-bf2c87485577", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee010c68-0295-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770297839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297839, "uuid": "27968f0d-cf6d-40c7-a0ff-084a89f0f412", "comment": "Malware payload", "value": "198ebd39010de9e6ca8fcb1dce9b61a1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297839, "uuid": "a6d9c847-de7c-4386-b84a-7ed7a59bb564", "comment": "Malware payload", "value": "95c3e275dcf665fc3665c6b02c0fcc3228667fc4f162db4d939cb0edef328aab", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297839, "uuid": "af8cb31d-d708-4727-9c9b-985552c38136", "value": "T195A5F11CE1426C33E977F2BD90975252EF35F28265E95D96B8C259280B0E2243F327", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297839, "uuid": "f1784acf-974a-45bf-8dec-0358ea52073a", "value": "49152:h26lqaM2BouGBfZL7hkbRLDLAbiQK+JBiuEuzI:g4eT7hkdaNX7EuzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770297839, "uuid": "85164c22-6d09-498d-8a86-6096397ad886", "value": 2144120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297839, "uuid": "5bc39ea7-8f8b-4360-9804-a6d2f378fc31", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab050639-0292-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770298026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298026, "uuid": "5ff80e7c-7243-4005-a29c-768bbf6870fd", "comment": "Malware payload", "value": "759164e32872de85c6e5439e75c84bbc", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298026, "uuid": "0679c58e-448c-429a-9736-f045570b9275", "comment": "Malware payload", "value": "12961f5fb06b65d406a59043dd8259332e56c84471c966df13280e7eb9abfee3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298026, "uuid": "58600280-a360-4688-a16f-79f81f8cdcf9", "value": "T19E31E783B32E4CA2FA06D971BB372B1415A821E1E3AD04CB89ABB097D48A1A956063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298026, "uuid": "8c4584ad-cb0d-4193-8413-70d8e2b9184a", "value": "48:9HEkXO+ybCK420ibjXG1rq54DxHwQTB6uQ5YMEWf4lT:tEkH/20b8seQtQFEu4lT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770298026, "uuid": "d5b05642-cfee-4705-bc50-95096baab0d5", "value": 1823, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298026, "uuid": "097ed00b-6a0d-48c9-b533-bb9575397fad", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9797e19-0296-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770298180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298180, "uuid": "8d6b3c98-1744-43b7-ab7b-a2c32ba1dc95", "comment": "Malware payload", "value": "ab7bedfaddd68182ccc6d808c847dde8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298180, "uuid": "c13d6359-dcb8-4493-81e2-8516a572dd5f", "comment": "Malware payload", "value": "c2cd34c0f4295339c1d611c5a9a4847be9da704e3454fe781f4af47540c0bb9d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298180, "uuid": "bc93355c-3a43-44c0-83b3-842b4b3062ac", "value": "T14A46022FB28BBC3EE41A3B370572E15494FB7A1DA5226D5686E4849CCE258D03D3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298180, "uuid": "a54731d2-86e8-4e6d-b90a-33bb2c78296a", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298180, "uuid": "2ed6609c-b448-49cd-9bca-93590d2148af", "value": "98304:UrirtAN325Iu0yPuEUayz5HjFsFeQZVHgDB6Xo5NIhGouQUIM85Rv+e:y2ApYewuysHj5+Y5NIh4812e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770298180, "uuid": "1f3d823f-09bd-4407-9e2c-7eb2f4ae019b", "value": 5437671, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298180, "uuid": "6c1641af-b621-40bd-8e99-9bba1ad40ed3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf5a6a49-0294-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770298288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298288, "uuid": "8b5659fc-7a8a-42e3-8edf-1f295191ff3b", "comment": "Malware payload", "value": "faee936eb962455512acf34fae2b6547", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298288, "uuid": "29fb47f4-f0f0-46fa-b5c0-338bde593eae", "comment": "Malware payload", "value": "6541de1f4352e4ec5d60c310d2480ffa845cae2bfd08a7cfb16a13934d4dca17", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298288, "uuid": "48ec055c-ccf2-4188-b6f5-55994e350b21", "value": "T19431E934923E8C5CD064A3F0309D2622BBBBB75A81554592338C7C5826FB42BBE0CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298288, "uuid": "7424a94a-c150-48a6-bef0-e1d6af3fad89", "value": "48:9eeSzdjncOP+nJkwP4P4GAKr/eywBODXYi+kj:0VzZcOGn5QPEKaWDYidj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770298288, "uuid": "15cd6f9a-e5b4-4a04-aa17-4b32eb761616", "value": 1843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298288, "uuid": "6d04137b-f0fe-4a85-878d-bac6c280fae9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2082c4f-0299-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770299483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770299483, "uuid": "0169b31e-5c83-45db-aff8-63b6030dbcc8", "comment": "Malware payload (Mirai)", "value": "263f7cd8f817dba7d055558362f47213", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770299483, "uuid": "843c97b2-15e6-4295-8d81-18e6108a2b1d", "comment": "Malware payload (Mirai)", "value": "fc7cd78f2332858c06846f9065a58886381b832c0889dadd75a944995e81f0ea", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770299483, "uuid": "d63748cb-cd80-4ecb-9c8e-e160dd95f5d4", "value": "T1D5D3C021E4006DD1EC2129F578BA96BC0350EE700BDE1582EFFDE95E747BD94386D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770299483, "uuid": "c06fa9c0-128f-4cb9-b0e6-1b5ef6922178", "value": "3072:PHiBTNkAgcly+hoVpE6AKUjq+8biA7JBd/xh:PCdny+hovsmzbisJff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770299483, "uuid": "3ea900f5-11d0-4bbd-b265-83deca5ae33a", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770299483, "uuid": "71085f02-00db-498a-9523-c8dab357fee0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e048bd9e-029a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770299963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770299963, "uuid": "7eea410a-1cbc-41b3-b52c-d17a8515e7ca", "comment": "Malware payload", "value": "e63ed9e8fe3d5dd86f60eda2db887881", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770299963, "uuid": "97438061-5cf9-48c4-b86e-ae409ec18a47", "comment": "Malware payload", "value": "aa5d044a87111ba924ff842e434b5a212985ae6dcadf6fc1a68a5fff39f16f0e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770299963, "uuid": "40b2faf1-f680-4fe4-a65c-c28fe7db377e", "value": "T1A193E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770299963, "uuid": "0fd56296-7148-496d-af09-f72409a3c236", "value": "1536:pap92uEEwH8Qw0DMqpYJKNoE+pTYeGf8BqLv3TliCoRGpNuqYPPXOIH8LutVWw:I6uEEwH8h0v+pHBqv3TliCoRGpNuqYPZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770299963, "uuid": "9e7c63ef-37b3-440f-b7d1-a4a76057909a", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770299963, "uuid": "e3a858d2-3ef3-4a57-b9be-04ac3f02faf0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38db490e-029b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770300112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770300112, "uuid": "a2e47a18-e2ac-4386-b06f-276ec4bc0b86", "comment": "Malware payload (Mirai)", "value": "33c40b694eb9fdf243cd788ce47a75df", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770300112, "uuid": "97c1aaa4-4f5f-4be4-904a-822d7d450cb5", "comment": "Malware payload (Mirai)", "value": "a899f49b13048eed80f78427d0ddc356f298f8dbada776cbbb3fb2b6a42a7c5f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770300112, "uuid": "90988f58-72f0-45fe-8144-6a56a3281b7a", "value": "T1F9C3F185BB636991D0A242FDA4C00AC387912E318BE217480699F674387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770300112, "uuid": "040af775-4618-481e-a091-b24a2d089560", "value": "3072:SBdQK+TG2nIjnRdZaUXUSgkLCCVwHWiEiBtbMMTnA:eMQRtXU9kLCP8ifbxTnA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770300112, "uuid": "afe1a414-99a9-499e-a310-44e1df315270", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770300112, "uuid": "460fcb8c-89b2-43be-8926-f24d58942ab3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f68b1dc9-029b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1770300430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770300430, "uuid": "0d660acd-cc6d-426c-b3dc-6d9553d705e8", "comment": "Malware payload (SantaStealer)", "value": "9150cd24e8f542a5df09f437cc140938", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770300430, "uuid": "7d5a0569-6c9d-49d5-9631-309ec4a73f37", "comment": "Malware payload (SantaStealer)", "value": "d770f2c8ae8441f9bd6014374eaa660681f27bf9c5ddc571a8e5491ce0ef1b96", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770300430, "uuid": "1e3c75ab-78b4-471e-b05b-7508216d3b86", "value": "T119A6BFDAD16E44D2DC053FF5A8141AC78B2447328A7400283A6FBD899F775FEC05EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770300430, "uuid": "901fa317-3876-4945-bf57-cf22db1c1dd7", "value": "fcc736760ffc18b2096bf8dc1a972ac5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770300430, "uuid": "ccdc4ca0-0010-4cd8-adac-05f026ee3dba", "value": "24576:fo8xww0cQd+sR0eaZBRYv8UZAlAax2704Uu9xI0goZEkFj+v3PDvXaAuBkXAA+FB:fo8xwzAsHcRmVr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770300430, "uuid": "cb62c61c-3cf0-411c-a56c-272d7b143164", "value": 9676748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770300430, "uuid": "1515c338-8ee4-4e75-b28b-9e93aea3c52d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ced42311-029e-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1770301652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770301652, "uuid": "10d7ea86-e6c6-4203-814c-ce347bda9560", "comment": "Malware payload (Vidar)", "value": "7313322745fb84b2cdeffccafac3c3e9", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770301652, "uuid": "9da9785e-9cfe-4c95-93b1-7aa329038470", "comment": "Malware payload (Vidar)", "value": "141a5648e3e4bb365f325dd618299b7bbc5e4641dfeaa14be0654cd525130fe6", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770301652, "uuid": "0f3fedbf-8cc0-4a48-85dd-024246a584c5", "value": "T1318522913AC8C13AD39E0537887B8B65766ABC354B3180CF66A07E6C5A317D3BC393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770301652, "uuid": "1ce5b892-9fc7-4c9e-8781-a170924bd3f6", "value": "49152:Hpxx6KyitSpxpj/zC+MI8OxOGZqFtp7P5HSJ:HppyaSpXj2ITxbqFtp7P5H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770301652, "uuid": "b32914fb-99a8-445a-a3bd-1db4801cd8ec", "value": 1720320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770301652, "uuid": "959f0a34-6c96-4358-a41f-a788a2b723a5", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d04743-0294-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770301904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770301904, "uuid": "6fcaa1c0-adf5-4495-bed2-20cb9141da76", "comment": "Malware payload", "value": "0e1012b08df2502e8a769674779e55d4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770301904, "uuid": "33eca1ec-f6b3-402e-9382-8c2814a19892", "comment": "Malware payload", "value": "3fae114b7c95620f65edd55b0dbf4b2ded3a2ae05540c2e1ef5cfa0a2eef9d78", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770301904, "uuid": "1bef10c0-c6ba-4e64-9d8a-bb4abcd49f76", "value": "T1D1310B26706EE59CDC241035AA67851CB242D5112CC9C39E1D6A8701DF74F831295B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770301904, "uuid": "4ca2ddf6-4d46-4a34-89d5-fb945d9ec18b", "value": "48:9MG2AMopf89lyG3dAkSGMI7xo2MgzHC8KqG:Z2vopfKlyG3GkS6WcC8E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770301904, "uuid": "f3066d06-a188-4aa2-87b6-845297f2f9c7", "value": 1822, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770301904, "uuid": "1839c0e2-23de-4a8f-beff-103694d70ea4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c45f9f3f-02a0-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770302493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770302493, "uuid": "aafd7160-a172-454f-a2e1-53b2e79d8151", "comment": "Malware payload", "value": "fef35a13c10807b4dd6c52295e640cb5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770302493, "uuid": "dca748e6-e403-4d71-9859-329b1e62eb6d", "comment": "Malware payload", "value": "a602e82a461d90709f9675d070bdb8cd73ab92d1c53e389feb707ff19c010c83", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770302493, "uuid": "67c0d731-dc78-4231-8efe-ef1349cb198d", "value": "T154E3E96F83F7313572138359F5A6B728966DC133EB410EE2F9B29A9C8FC11A201761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770302493, "uuid": "f970b398-b761-40d1-9668-d4a738d446c8", "value": "768:1ZdapEbrTXlGRNjcXscJGcz74k/tHcTwAHempp9sfifRfiVIrePfHKIYW7uoFSnB:dapArrl4k2wLmp7oIrU7QA4YDhJgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770302493, "uuid": "a4703f12-474f-4829-b6e2-edab92a65756", "value": 153968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770302493, "uuid": "40e494ec-afda-4171-83af-abe4f02cbade", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e34ef2c1-02a1-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770303034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770303034, "uuid": "e11724aa-3ddf-4398-9e39-59c0e284175d", "comment": "Malware payload", "value": "37ed80c2981549d3eeaf03953ca43701", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770303034, "uuid": "b0971b71-84b1-4e6b-8f78-48043953d7cc", "comment": "Malware payload", "value": "17fc26b2482809a6bd2d61d36a9cfcdc291c96d892b8e82340480752bba6f585", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770303034, "uuid": "da6b56fd-8bf2-457c-97a2-ec6c1d706473", "value": "T10831D7AB0AC64091C1AF0B74A61C66D0B3489E964E7CAE5EED4C6758DD318295E100", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770303034, "uuid": "1307e84d-0dd5-45b4-8058-f62d450031ca", "value": "24:9J+z4R8k2fmZDjVuwuMMV8/0xDoyHmSNbndZ+/kpdQAv4pzgL857CW2Hb0sYqkJg:9ImZDjVuPMMV82NbnG/+7w/P2YqyOP7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770303034, "uuid": "8705e3ba-bb6d-42a9-a66a-8339da350428", "value": 1860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770303034, "uuid": "0911e50a-8674-4eb6-9391-4759c992836f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f06807fd-02a2-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770303426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770303426, "uuid": "312e7a5d-8b49-4e26-8c0c-4bb26208e863", "comment": "Malware payload", "value": "eaafc56f873a66ee62fcc8a7f64daa8a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770303426, "uuid": "40b719d3-36f2-4d82-b0ec-dd1eede73883", "comment": "Malware payload", "value": "1aea7d7dc796653652780ab61eb130e1c577c6696f1e3615af9729438f476f56", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770303426, "uuid": "a2e7fca7-6395-4a14-bcca-14930c592838", "value": "T15C55121E66A20C1D4F6CBBEB71B9BC022EE884CE742F90CDD7CD7051BFCA5A545A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770303426, "uuid": "f72ce30d-217d-4857-a415-5eaa03e7a168", "value": "24576:HLxpGGsfRBRqtG1C1vMi9jQsntvAYOSB5hg3+eXCZQbdtdc:HGG6Bk/PjltvSQWd8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770303426, "uuid": "a45d0b65-390b-4526-94b2-4c99f589a476", "value": 1344433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770303426, "uuid": "170a60f2-379a-4aee-b99a-8d3b8f7ad0c8", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c945a33-02a5-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770306497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306497, "uuid": "f6e4057b-8902-44a3-83b1-739f8c5d3e9a", "comment": "Malware payload", "value": "4474f6c18335c9b3ee81e37926c2dd62", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306497, "uuid": "dce7633a-1a8e-4cad-bb8b-36ae76e0d431", "comment": "Malware payload", "value": "7297f440b8252e78a1954355bd802b9ee5e306d431bad4fa5e5132a51fc5f1af", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306497, "uuid": "5cdb2fb4-be1f-4563-8cba-627c9fb9736b", "value": "T1A131F9025D4EC128CCEDB376C10012446A355AB57D3DA54B0A8D00BAFC192FE5BBCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306497, "uuid": "9155ff5f-7521-46a2-b31c-d99839c25b07", "value": "24:94ZoVeFP6gZswGbPIid8UuwXDVXP8/yos+YAp66gQyfNmeSxkn0f3R239AMs/wfX:99Tw70DdCia66JE6xhfAt9mtuHQF0N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306497, "uuid": "cb7a4818-bd8d-41c6-8626-585152d22eb6", "value": 1876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306497, "uuid": "46102999-ceb3-441b-bd23-9ebd0f0ec58d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db675325-efe1-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770306668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306668, "uuid": "8dd5d85e-b543-4426-9ab4-a2fcaf1e7a65", "comment": "Malware payload (Mirai)", "value": "1143f762df3c479862b706d65a7f4a19", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306668, "uuid": "eea595f5-2baa-42ca-b415-97d55b8018f2", "comment": "Malware payload (Mirai)", "value": "9d58f973f2a04cbd470862a2d663be1cc543ddb7903328196f63a81c5d0875ac", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306668, "uuid": "3fb4b26d-4f81-4948-86d4-3d40cd9f9bba", "value": "T169F32B06B31C0947D1672EF03A3F2BE1E3EF9A9121E0F641751FAA8991B1D360686D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306668, "uuid": "8396f47e-89b5-4a50-9a38-cc38216acca7", "value": "1536:vkDs4zhsuXVZuvlSbxObC3kXUQseGGvonUknVHE/Zq0LqXwRRAdAWfCIgkqPqHnr:8D5bNxRUXUQsVmy7+L6hh1pw2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306668, "uuid": "cb029ff4-9f31-41e3-8062-324de20bdcbd", "value": 161988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306668, "uuid": "015e6a9c-1864-4578-9bdc-afdad724537d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d03948a2-c890-11f0-85ba-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770306668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306668, "uuid": "9d7cc4ca-7b9b-428a-8556-f06332d22f15", "comment": "Malware payload (Mirai)", "value": "884166bfa66069650d569a878f1f3047", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306668, "uuid": "6dd99163-e131-456d-94c2-af5918ff7acb", "comment": "Malware payload (Mirai)", "value": "560a3e1264aa447a680ac2deb7b8e71e2ec8c45a1e710e4ad3838396d82942a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306668, "uuid": "4c7c5134-9661-4e93-b85c-ddcef070b443", "value": "T157F34A46FB408A17C0D62779B69F42463323DB6493EB73069928ABB43F8376E4E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306668, "uuid": "1686bbd8-4ebb-4f4b-a185-5359ea467c7c", "value": "3072:qLWyCGIfja9T0hXqEJBEKDqpXrNP32MiL/KEYRz:q/Ofja9T0hXqEBRqZrNP3xiL/KEYRz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306668, "uuid": "23d01dce-8821-42ac-9e55-5ddc3336beb9", "value": 170097, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306668, "uuid": "45c7d603-cd42-4ae4-a78a-75dd4207de4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d12d709-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770306669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306669, "uuid": "b9ce2b52-1540-4f45-89ab-d7321f77edb7", "comment": "Malware payload", "value": "002f6389700d50f04494c506c6e82971", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306669, "uuid": "97e1c8c3-c977-489a-abe4-8627d3f13327", "comment": "Malware payload", "value": "f0adee53fc25bbd239651a32900a51f67606cbd2879a25e1e3d3837409a479b7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306669, "uuid": "5f03f246-d9ed-445b-a763-164e3a76a732", "value": "T158D5333F77CDECD918224EB1C5500827276FBB5A934A42E3F597906C4B8E1AECD61D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306669, "uuid": "4bcdf22c-35b2-413f-b706-3e245f6ae1f9", "value": "49152:kkBIbVhUfJ59Ove7C29S/ejZmMkZRSdn5CAk3a4Neg+SFxSN+F1WFZaXSAJ1tiFf:kkBOhUfJ59dH9SoZmZZR+5Pkq4N1xSNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306669, "uuid": "d4774785-3634-4d76-b352-8b88c5e107ce", "value": 3000445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306669, "uuid": "df257afa-8486-4c3a-93f7-777daaca60ed", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8442a57f-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1770306681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306681, "uuid": "e2e5b689-bd54-4fa4-9c01-6b027de8e432", "comment": "Malware payload (ConnectWise)", "value": "4782ec93a020e1fd742ef22c30800dd9", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306681, "uuid": "2b08ca19-3dfe-4d83-a6cf-3d3745a3f4ee", "comment": "Malware payload (ConnectWise)", "value": "924be472de4d7282c3e3188552a62b0d513903ecef71b10cba2e6e21cccfd439", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306681, "uuid": "8b43f776-b78a-47bc-b662-e8c81a005695", "value": "T163A6237127F88429F1A75B39EE3A89E229387C64DA26C05F17B43D0E1971E509B723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306681, "uuid": "6fe685fa-eb99-4016-92d0-6f63ff14a2ae", "value": "196608:AKaLNkbgci4QeKaLNkbgRKaLNkbg7KaLNkbg:GWgciHAWg1WgzWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306681, "uuid": "88c7b476-ee06-4f2e-93af-f37ef9161148", "value": 10072064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306681, "uuid": "ed73661f-1b65-4585-91f1-997bce021fd5", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "844bb197-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1770306681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306681, "uuid": "1b4c3b0d-4bb5-40d9-bd24-d5da45c2b0d2", "comment": "Malware payload (ConnectWise)", "value": "46ad5763db27838895df6aab7fc88d55", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306681, "uuid": "a75472c7-09b7-4860-8711-0cae32f52300", "comment": "Malware payload (ConnectWise)", "value": "3e95893df2b0a6ae170d29478f40e39c2ec2affb0e9b46e5731ee6670d084a87", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306681, "uuid": "0568dc94-ce0b-4d70-9859-cfa7ca92826c", "value": "T1DEA6237127F88429F1A75B39EE3A89E22938BC64DA26C05F17743D0E1971E509B723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306681, "uuid": "b93a8dc1-64cd-4806-8231-29ede1120df2", "value": "196608:BKaLNkbgDi4QiKaLNkbgRKaLNkbgvKaLNkbg:lWgDiH0Wg1WgHWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306681, "uuid": "1f492a42-f80b-4258-8b7a-a61e5034c6e0", "value": 10072064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306681, "uuid": "e8180041-29db-4b58-8bbf-cf6b81322877", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84c2c7d4-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770306682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306682, "uuid": "79304caa-512c-4f57-98e5-99c43e46115e", "comment": "Malware payload", "value": "14fbb09112ccb98b95edd2d89b65e2aa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306682, "uuid": "434ab1f3-e514-4a1e-8346-34a8278f90dd", "comment": "Malware payload", "value": "37d37ea1006cd73c9d404c0d6148233a1ee183c49b31363d3591bdb3c1ead99a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306682, "uuid": "281a6389-b757-4347-9b31-d93260afde92", "value": "T18838338E373CD0CAC84E37F3B0D6558815B2568B466FDA8763D99696FB25F0638382", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306682, "uuid": "9e8938fe-9268-44c3-96aa-c8c30c6a52eb", "value": "3145728:T8lfRVtsQP+mkVi8ZF7ZnT22TkjQHuNpue:T85DtPmmkVi8D6jjNpp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306682, "uuid": "7d7a2e13-ef09-4ae7-a04d-b87b18f8bd0d", "value": 111228193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306682, "uuid": "982c171f-0fce-438a-90b8-1d7cac50459c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fb9ce8a-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770306727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306727, "uuid": "f5630925-ff96-40dc-8a40-43fd7ea769a8", "comment": "Malware payload", "value": "809ea17ac7b1a9c4f9b84046ff66c188", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306727, "uuid": "bf6febfb-de2c-4df0-b977-49113ab69fdd", "comment": "Malware payload", "value": "4f91531d32926dcedac750f239ef2d135330b47b72f90d0fd90c4883047c4d67", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306727, "uuid": "bcfdb97b-fb5c-4b2b-ab56-49d667b1727f", "value": "T1C675B0BC76047DE6266F176BDA96ACDD13B627239AC7A4CC806877C305A3375FE028", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306727, "uuid": "7a2bce97-79c1-4d02-ad87-1ac1d456f632", "value": "24576:p69T7mWVh6mmqNNs8JJjOH8nBgAMf49HwGOeExZSIx1HyHssIHjPvU/VX/ZlZNJ3:2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306727, "uuid": "e1e08dd2-f98e-49dd-bca5-5d1eb5fed07f", "value": 1571635, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306727, "uuid": "accf673a-4703-41ad-8cc3-3677221c4676", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d27d7f5d-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770306812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306812, "uuid": "3363809a-243d-46f8-8fe0-97b977092502", "comment": "Malware payload", "value": "68335bf774e1ff6bf5495da3108b93f4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306812, "uuid": "a65336b3-ed04-4c66-8137-938a5782bde3", "comment": "Malware payload", "value": "edf4a79585fef3c907b2527ed4ecc3671af55a26e3338b091cddb7df8665496f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306812, "uuid": "1c68331d-67e6-49fa-8bbd-72b98f505095", "value": "T1857423C335F1A48AEE518359BFE9FF15A02039F4D27404E7729EB8893D9925B00753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306812, "uuid": "01a214c5-233b-4e0a-9106-a5bf693b5cc1", "value": "6144:JcXbh6mBO7+LFrSGCsqVwDPgd2Bp7zXNM6AcMVJII2WwgpGCMA7ZY3EpmUrybelH:aFlO7+0GCsqVwDPg0726KVJIIPw7QZoy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770306812, "uuid": "6a5c545c-99c5-4fac-8f17-7d71d56ecca0", "value": 366391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306812, "uuid": "df866617-e735-4836-8be1-bb07f30b7c91", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de2ac5c6-02a3-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770307055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307055, "uuid": "94aac194-a88c-4b15-8549-31981a22a1fb", "comment": "Malware payload", "value": "a9aceb43953fd2ad930e22d1f03b23a6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307055, "uuid": "5d0f7a5a-9c18-42b5-b9dd-fb9eaaecdc63", "comment": "Malware payload", "value": "7c03a0f56b16986d54538f2bfed37c67df183e1a8a154ea6a6ac2a9df31e941c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307055, "uuid": "a86c58b2-f4fd-4cd1-b4e8-ba9c7e814d24", "value": "T1D331EBCC7B32A10BD6FAC1B78B409105EF596B1B44B5899B6A0057521C835149E58E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307055, "uuid": "a2c3da4d-0a13-44b7-81e2-a7be4e6041d4", "value": "48:9JmPbo3iLmUm/8IWFgZKLvgOoeA0yahGDdNqTF0S:yPEyA8jOwvQeA0yahqfgF0S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770307055, "uuid": "6c620890-7db6-4d82-b6e7-e6efef32bc90", "value": 1831, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307055, "uuid": "4c06d057-6685-4de5-859a-a2373180908e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9788fb53-02ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770307572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307572, "uuid": "9143fa18-4415-4af2-9412-9328db3b2476", "comment": "Malware payload (Mirai)", "value": "5f65b7dc6d20db8cef8151f51f45b6b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307572, "uuid": "acf420d7-7b89-4872-8c3c-97259d4d01f0", "comment": "Malware payload (Mirai)", "value": "59a3665b991673a10c3a8fe14f2bb9e9e012e47a753f25702a8ca5508494b8d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307572, "uuid": "90948ad9-570c-41f9-bfbb-18ee7cc61ea3", "value": "T1B7C3123EBE86E99A54F4A7FB6D9F4873F50168C5880058FED2D00125176C31BEE34A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307572, "uuid": "95e94b4b-a311-4510-86e6-00f8ddfb0d6e", "value": "3072:wiuOqfEgIGz7wTLufsSP0fDut1qCrEQgujrmIMyZ:7Ccq0TGeqbrEQguiyZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770307572, "uuid": "7be806ad-5fa5-4df7-8391-c768a9bb5f82", "value": 121504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307572, "uuid": "24cc3ef1-4b0e-43f2-a396-74701c1c2f34", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d997d0e8-02ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770307683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307683, "uuid": "500e65de-9882-4fd3-8abc-ccc42541378d", "comment": "Malware payload (Mirai)", "value": "2df866ed4d5f16a8774dc601f7a5ace3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307683, "uuid": "9670be2f-bb20-4004-ad27-8785192b5e7c", "comment": "Malware payload (Mirai)", "value": "39ffb272f573a4fc2ecf66cdfd210fa3c25018ab5bd01e7cd516bbaa3204462f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307683, "uuid": "ea20c2d8-a07d-42b0-9d16-711a0d952929", "value": "T143B312661311CD87D4CADE7048B969D8791AD2B77BFA3E084C08E4583DC64E8127FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307683, "uuid": "b24fd23c-0262-452c-820f-fcec6df86d49", "value": "3072:g3/OisEboPLnJje8hKwHSht3QP4mYxubkyqShMzJ:g3/Dn2Jje8U/3QP4b6ZrQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770307683, "uuid": "b4795cb0-0436-40b1-90c2-673f5f95de54", "value": 111592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307683, "uuid": "b0431d4e-d3e0-45ab-8a1f-e1c4949ea549", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "720c43fd-02a7-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770307706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307706, "uuid": "9b2d9660-57d0-4d24-b786-99cec7f40adc", "comment": "Malware payload", "value": "d6996f2738586283e5276bf50b4b052a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307706, "uuid": "571d19d8-2451-4104-b21b-b4ace4ae213d", "comment": "Malware payload", "value": "5503cd59d962d4e87a89a0a3588ac87d4ceb9eafe4decb4f0f4132d70306bae6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307706, "uuid": "808fb217-dcea-4fb4-8f1b-834e6e459b6f", "value": "T1CA41D949FBB9649BDC022575C936B4B91E7842629C1871EF030D09311C818AC0F76B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307706, "uuid": "7b805de9-f962-4797-9bb4-92395cb9ba0d", "value": "24:9DqGnBYMa4TYjkXDkvsX5H4q9py0+mTV5qvmxKjZIWM1QYdY0BgHhuVo7IqKmPWC:9LBlRv2Zq9pgKTq20ZIzQocCa865LmMt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770307706, "uuid": "af132349-02c5-4e43-8366-ee17e7a13278", "value": 1884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307706, "uuid": "45e9725b-8d17-4a7f-b4d9-ce8f475728d7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1770307938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307938, "uuid": "ed47354a-2e86-402c-a035-a313ef65462d", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307938, "uuid": "7c2d0cd2-5cfc-4c44-97d2-a51065b50e8c", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307938, "uuid": "2ffca65c-e7b9-4ba4-846c-b40dfa130817", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307938, "uuid": "6395108a-9f68-4435-a1b7-d737257fda8e", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770307938, "uuid": "80df0284-0d04-4035-a4e3-298f616c59f2", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7b6b7bd-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770308136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308136, "uuid": "5e2942be-2d9f-4ef7-9201-f0382178f0f0", "comment": "Malware payload (Mirai)", "value": "9c8722019404d4ee6412b2a888229443", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308136, "uuid": "540f1d67-2aa6-4bd3-9311-7f56393845cb", "comment": "Malware payload (Mirai)", "value": "a98b74a6626cca342bb439fd0a3c36552374dbfea08dbfbc1436ca8abb3a81a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308136, "uuid": "f7ca2265-848c-4c80-a433-ffd7422ec25b", "value": "T18BE323B077418250FDE979F23B4F2206F421221D3EB4A4B8DA9C48D35A5F9694E132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308136, "uuid": "def88d15-b2f0-4e80-9c97-3cbda3db12aa", "value": "3072:mBKkE/ILjP+Pc0ce/9W/JRO8wqiQ209/9Z5+Zy0u:mBKkE/aP+pbgjO81209/Hqy0u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770308136, "uuid": "dcd6778a-6591-47ae-9fcb-65b134d96387", "value": 145196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308136, "uuid": "a6172596-6cb4-4d23-aa10-0627ff348d51", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6384a463-02a4-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770308793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308793, "uuid": "b095239a-a84d-4e82-8c4f-a56c750c2233", "comment": "Malware payload", "value": "11a9c95880acb2da892808b74ed22f13", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308793, "uuid": "e68cae39-e548-4a1d-abea-fd28522815e1", "comment": "Malware payload", "value": "b8cc75c7ad9465f6df775d7a1e7eacb016afeb2636ee3c06a3337719863dbcca", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308793, "uuid": "7669dd69-35db-477d-8db6-f5cc53fcc74b", "value": "T1FB41B779B5845FBCD8744772A79B2F40C635AC321CA3DB97232AA05C7BB36834E11B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308793, "uuid": "2120dbf7-bf14-4258-80fb-709848bceec5", "value": "48:9WUyosJMxRdhNQtp8W9yBUxbpZ4H3bPMiIjba6J31V:Q/WxRHetpXrxbpZ4LPMiYbaaV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770308793, "uuid": "02871321-3e04-4619-836a-6a68b6cd6e2e", "value": 1877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308793, "uuid": "a34e6fe6-6a2f-4f68-b5fc-02a08597b138", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea58b3a5-02af-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770308999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308999, "uuid": "4c3f550a-ddb8-4070-bbcc-3e0d4f8b4307", "comment": "Malware payload (Mirai)", "value": "50b8ea21a19cc1a9d6e1121d4828445d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308999, "uuid": "3cfbfda7-341f-4e17-a77f-ba6144a26c8b", "comment": "Malware payload (Mirai)", "value": "fb9d5d64e409c622c0f07aee21fbe25112e945e0f1421a64f6c4ad53c1c9d356", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308999, "uuid": "a99b4dca-d085-4b70-867c-076f11c8e3cd", "value": "T1F69312793531944AF11E777F815CE0BCF89D26E2D9C44BF40C2814ED9EC95B92AF42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308999, "uuid": "1fe172d7-e30c-4437-8e14-6464e5d893d0", "value": "1536:gRfO/ikIaubGZpQd2o0VL8IonDRdbaHtyOLU1agWWYyoUatqWnnBiNoU3ltAUpgg:gRm/i7xbGZxo0VYIonVYHtyOwJWWjawB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770308999, "uuid": "b96b7f05-a223-42e1-a053-f299ad8b68bc", "value": 94568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308999, "uuid": "48a8e7a9-9dba-477f-88fe-cc60def860f0", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "559a9e33-02b0-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770309179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770309179, "uuid": "ca758f96-886d-49c6-a4be-900736789df3", "comment": "Malware payload (Mirai)", "value": "18240d51ab9f17bb4c7cde4ca774b01a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770309179, "uuid": "e81b0e67-af93-4636-8168-39211aae83ed", "comment": "Malware payload (Mirai)", "value": "8fb56f784afb30cb064a9b17fb5e2aaa7f3e2617d7ac19ab6246971e887b2498", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309179, "uuid": "e00d08e3-8164-404c-8de4-7b3fd36081bd", "value": "T1636301B873EF8530E0D9E532154F21703331EB56A43B63DD3E95F5ADE2625980863B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309179, "uuid": "431b46b6-b883-4b63-920d-fedd258235bb", "value": "1536:hltrI7mDmde7Lletk8cghgLFPjihgulh6DoI3FrPI:hl+YmdkLMk8c5PdulI3FrPI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770309179, "uuid": "84f70aae-c54f-4314-a45f-705d6784cc38", "value": 70848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309179, "uuid": "dccac7f6-d730-4697-ac28-fd20e3ade41b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f9cf2a6-02b0-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770309277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770309277, "uuid": "22d3f3d8-e646-4624-bb59-57172a9bcb2f", "comment": "Malware payload (Mirai)", "value": "4f3f24ddcf5a70e6ef36be6c5cd57005", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770309277, "uuid": "b8e645bc-fb37-466b-8a8b-2f844d275de5", "comment": "Malware payload (Mirai)", "value": "59d2710a3cb661d9ac9846fe5931381c8c895cf329aa15f78049d81708d9ea90", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309277, "uuid": "64a76224-1810-4db3-8bd8-6d7ce46f93fb", "value": "T176B3026567129DD7D4DEDE301C786DE4790A42B337FA3E848C0895842DD78E8622FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309277, "uuid": "757d635a-f1d5-4ea9-bd4c-56e84cfe9ca5", "value": "3072:c3/OisEboPLnJje8hKwHSht3QP4mYCc4zi2L:c3/Dn2Jje8U/3QP4eTL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770309277, "uuid": "7f7e0317-798a-4eec-b7a7-ddac9960db0c", "value": 111588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309277, "uuid": "b7e004d5-c124-495b-933a-738aa2923a3b", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce04ce90-02b0-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770309381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770309381, "uuid": "cc5b5059-29ea-46e6-90df-fd61982a0f39", "comment": "Malware payload (Mirai)", "value": "8ee3ef8666a8eb910b14dd706b52a83a", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770309381, "uuid": "16d3cfd6-7c73-4126-a563-7256ebd0c43c", "comment": "Malware payload (Mirai)", "value": "68b810ea130c08f22d0cf0e13086c5b3d83f3af24ce9c3dce44ccf39f62e6780", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309381, "uuid": "89fb1cc3-bd9c-4702-a3b9-9bc4630e53c8", "value": "T190A3121562C4CDF5D34AFA36B39ACAA87641D038263B30CAD738EB656CD26F5D4C57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309381, "uuid": "4057442d-7dd1-41e9-ab32-1efa8f4066d2", "value": "1536:Qbt/6WaKBHAAeWa05FiliyYgpHCa43S6aimPSvVCliVCRrkavx7mtzPvWmyLH6w1:etiEgAtD5SSgpHb4itKvYqCEZX+Lr1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770309381, "uuid": "b7c24972-f968-4435-a173-c1a70ef114d9", "value": 99012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770309381, "uuid": "6308d25c-2b08-4bad-aaba-1a8fccda5d29", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8af856a-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1770313451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313451, "uuid": "16c258aa-18bd-47d7-a0b0-35ad9e77b40d", "comment": "Malware payload", "value": "91904c76a5d6e973a8015a716d5943e0", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313451, "uuid": "204f5721-186c-4625-b7c0-8a68db63d632", "comment": "Malware payload", "value": "a1c7e1a0b84f6ebb45e91fdd79ec9b9c8d6d80b1af754c72a1952aff4674c209", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "77111e57-6ca4-47e0-8f76-0517fa60db1c", "value": "T12305E184F5E11E27E487823F9B8246770166ED1FB349C317574866BBB8BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "ececd40a-b8c7-46f0-9111-fa4050e31836", "value": "12288:FHkOsP1QHc0R9HaVc/fQZ0CShw6P/5cNDMsm4gO8/mRQbLv:FExepQi/fQZQ7x0O1Xvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313451, "uuid": "4909cf3c-4465-4c32-9a51-2fbfb5c49015", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "92ae6fa3-d807-4ae4-a5e5-72bfaa1414f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "68eadab7-fdde-4b7a-ad1d-b351c03fb116", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1770313451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313451, "uuid": "6d50aca4-25e3-4ab8-a115-663644598a0a", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313451, "uuid": "39ba965b-df75-441b-af16-7dd57da4b4c8", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "ac8e1b36-e22d-4012-9c60-432bcfa5cb6e", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "dabf30f8-39c6-4acf-aec4-071e63d3d321", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313451, "uuid": "bfc2623b-11d6-4eed-94cd-996688643d0f", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "27840a20-8217-4aea-9200-661b319a6ea7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "aadabe6a-8c69-460e-96dc-4eddef0fddba", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1770313451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313451, "uuid": "f6f6408f-4ec6-4ea0-ac44-ff5271c52eb5", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313451, "uuid": "778d6a47-d420-4110-93e3-7d82a9f2d428", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "8d164cd3-416d-4ceb-a607-414368724bda", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "6f04cdb4-6779-4266-9a64-d9d0271d23f0", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313451, "uuid": "044a436f-9017-4b3b-ba92-5b8369ed7665", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "7b3ccd1a-ac27-4e84-8b90-52d82871561c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "648f1f20-2aac-4076-a212-569f143672b7", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1770313451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313451, "uuid": "de78bdc3-3685-4b7e-b95c-967796d8e620", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313451, "uuid": "c4afc55b-5baa-45cc-b93f-a74ba86e7b59", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "09f4c18b-a3e2-421b-971b-d846b66d6199", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "258bd9e6-9aa7-414c-941f-9d90845d2097", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313451, "uuid": "b6624f20-0968-4732-93f2-971d63f623cc", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "0af80be2-fd05-43e4-b6c0-0891911e1ede", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313451, "uuid": "195ac078-08a7-4c62-8833-a34c57ec53c3", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1770313454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313454, "uuid": "df1a2d81-dd39-431e-a524-b6138d602c88", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313454, "uuid": "5f4370bb-c62d-4bda-8233-7060dd444ede", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313454, "uuid": "d41a12d4-e470-4d7d-a7d7-f86989890045", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313454, "uuid": "be9a0506-7b8f-4c9c-b927-8894a3fb65a7", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313454, "uuid": "c4cdb467-879a-4075-9a71-b3705f38accc", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313454, "uuid": "1149bbc1-5558-4409-9afa-fa736b9cb2e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313454, "uuid": "48334cb1-c8a7-4f9b-a3e4-785b565dd598", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1770313510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313510, "uuid": "b3e13a89-299b-4798-ae68-1b43a1394cba", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313510, "uuid": "142070fc-acaf-4961-9e78-b24c01a3c398", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313510, "uuid": "ac3313da-a682-4415-ae07-6ac4b2dbd34b", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313510, "uuid": "c0eefd4f-f764-44e5-8d52-392df4460174", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313510, "uuid": "0a870d41-b47f-4a04-b9e1-5e0d21ef4d50", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d2e89a1-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770313568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313568, "uuid": "d3cd4d46-f654-44e2-958e-9dffbf3889eb", "comment": "Malware payload", "value": "7378770e68022811e42842ba75152448", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313568, "uuid": "332b6ec1-2134-4390-8787-a8c7bda01c1b", "comment": "Malware payload", "value": "101a02d39076c9f7ece767473a02ff5cdf78cb5c6e52d9ba233a3b9bf018fb37", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313568, "uuid": "b02ca8d7-6051-4563-8ae1-7587e33abf07", "value": "T16634E042940E8B894F2E931BF824157DCFB05CD4B999E4DF4AC6492A0C179EDA33B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313568, "uuid": "5eaee62f-0dea-4cf9-8da2-3c6ef1e70fbf", "value": "3072:lgqNZeMBJ076vj2jI+uJ5JrNf4K6v1DGDLlE0rui5lLR9pqia8ukxNzxexMYI5Nb:WMKj05nb6vl019Qi3ukxNzklHny", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313568, "uuid": "67435507-dc33-4949-a986-f2fadcde4deb", "value": 247902, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313568, "uuid": "709d203b-ccf3-4d4b-ab81-7c0f5c5dd086", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7a731e3-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1770313746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313746, "uuid": "824e0a9e-eb38-40c7-918f-661d368910c5", "comment": "Malware payload (Stealc)", "value": "26f77eb14e0d838f4a8da44862ecb832", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313746, "uuid": "84b299c1-fb93-40e0-8e0a-e9198d45a563", "comment": "Malware payload (Stealc)", "value": "56a524ab14ed748549767eaddb993df9a9ef5b0bbe34a7b8aa7a5be052fdac06", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313746, "uuid": "018b3d2e-0240-4190-a8e3-d608c1f63571", "value": "T1D4162380DEC71A9AD86F233501F353764133EBBA9BA2091B66C97074D6633D126B36", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313746, "uuid": "e13b0476-564f-477e-ba62-4b2c92aaf149", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313746, "uuid": "33f9b988-b7f8-4417-9054-0786c43b5c6c", "value": "98304:bUdJUrYKSdoYENrxb8awNLMzxlgkeMfKQO:2JykOnlAawNmxPK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313746, "uuid": "1fea9414-4a09-46bc-9c69-bee561ec125b", "value": 4177920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313746, "uuid": "123df11d-2d0a-4e70-8720-a6b1ce48ceef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75b9f857-02bb-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770313958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313958, "uuid": "e333b5c3-e95f-4a47-8703-5e768e4ea380", "comment": "Malware payload", "value": "54e3e3dd2026ef4e5851e87d97ff514a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313958, "uuid": "e8742eae-3f52-4c4b-ade6-ec48f972a0f0", "comment": "Malware payload", "value": "81bc966460a5da01fcea6d984d3a4a6b8b85f843fcc0f652c8281e897a2de4c9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313958, "uuid": "d9ba09c7-8dba-4080-886f-2cb10bdd99ac", "value": "T157446E3FE2952CD7C03285B66C3895701E0DA9E00351E9D1B4ECA775DE626CB7B0A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313958, "uuid": "226825af-7286-419e-b907-27d2dd362b89", "value": "3072:W8DWMyeYYkQU7JinAvDb0/nqTqGTqkVX7uUh8TUhKPmiydYYhl+Pko6YQG5jnjq:WRHxQm7Ua/ypTJPmfYQG5y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770313958, "uuid": "a03b6bc7-75b7-4f4a-8df7-dd56302810e1", "value": 255159, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313958, "uuid": "81203fa8-b82c-448d-b4d2-e685643edd99", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bae8511b-e237-11ef-9990-82aee05be84a", "comment": "Malware payload (P2Pinfect)", "timestamp": 1770315202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315202, "uuid": "70a0dc52-2d60-44c1-bdf1-fb5f67861e80", "comment": "Malware payload (P2Pinfect)", "value": "d4f0c4ab122e0a7f27ba5864934a4ca8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315202, "uuid": "1ce0b282-8c3e-4ef8-a5b9-8e13c8b687ae", "comment": "Malware payload (P2Pinfect)", "value": "933beaec399d813b4b4abcf825e62b662eaf7040b30ccf4d2c9a041085bea5d5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315202, "uuid": "eb5fda83-6c9d-4b2b-9e69-892dd5ebceec", "value": "T1EB95330D92BF6BA5F5CD9A9BA7F933C1350C68B542D214E20147DA82E2B38DB4F056", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315202, "uuid": "698f2d30-e859-4d5e-95bc-224ab27637ff", "value": "49152:uT12PRdjWWT1GmRziMGZd8+BnWWKsBJF8A7+4wIQ:uTMPRIW5HcR9nWWjFJSB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770315202, "uuid": "701f964b-a8af-4897-886d-dd6032dab4e4", "value": 1911588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315202, "uuid": "8a7a468b-910a-4439-8477-256387fa4c54", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c013807c-02be-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770315371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315371, "uuid": "3bad502a-8be3-4997-a08e-b8e99dc118d9", "comment": "Malware payload (Mirai)", "value": "a6fbe5a1e2e0878fe130f58165a168b6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315371, "uuid": "388d7246-809a-4699-8b4f-0fd31c7bbcda", "comment": "Malware payload (Mirai)", "value": "2a69a8ea97f711836cf398e5290c4a6b593721ee82ffa55a4316c48bfc38f7c2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315371, "uuid": "6c6b80c7-4d2b-4a42-8e64-3418d9023140", "value": "T106C423F52149628BD40B42FAAFBBC0A1B692B87DCD4B00E1EB49EE1D273C457111E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315371, "uuid": "88bec769-210f-461f-8885-6669e4ffd110", "value": "12288:5jeMqw+wLOCeVQPGlrScBDsSmSRPsfh/xeg9iGELvK+wK:5jQZ1tl+Ko1JxekiGELxwK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770315371, "uuid": "1e594025-1b57-4e5e-bb32-b6e263181e3c", "value": 553160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315371, "uuid": "7860fd7d-3546-4c2e-a34c-dd348f7d2b04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01efc2a0-02c1-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770316340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770316340, "uuid": "ff37b20b-a40c-4012-a1a7-52d5ae6d8fcf", "comment": "Malware payload", "value": "811d647bc715830357d58bec6f9cc654", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770316340, "uuid": "e8fe763b-0672-4e87-b184-d52856e9070b", "comment": "Malware payload", "value": "a550ad096605b3f9746342ebc04d01d21d8918f75dbcc1fcbef6eb90771b6e0d", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770316340, "uuid": "d9e22c43-7677-42c0-a18e-baa329c093a7", "value": "T1C0310963B0920F44E2DFCEB8208605A84396B8DCD86273EB57466AF129E01341F8A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770316340, "uuid": "4b3243f0-d530-48e3-ba4d-bcdf20f75222", "value": "48:9FQ9sbhiuJfTqmn9X8qO72Mt3OGDjto//kn+BrCdJ7Qo:4sbhiuJfeCX93MJ/oE8CdJp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770316340, "uuid": "5b3c918c-3de0-4dff-8e2d-52b377ff81d0", "value": 1799, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770316340, "uuid": "dc65e087-f942-4fdf-8e0a-6544d6b3acbc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a05f8f5-02c5-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770318126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770318126, "uuid": "25013099-cf5b-4427-b7ca-b08cc782197b", "comment": "Malware payload", "value": "d0cd194028bb33ce5537f52f99858f17", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770318126, "uuid": "a112ef0e-c7a9-40d3-a3ab-5ed97fa9d86d", "comment": "Malware payload", "value": "f0ef675a5e3849bdc82f107c9740366d9763dfce6d6dd2a44e0e073d3fabe148", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770318126, "uuid": "d87b328a-0adc-4bb4-9dfc-9eba2f75df7d", "value": "T1D834EFDFE4F9264B16CE72EE81D6C88F0FEA69F16D2A4A100180A14B195C7C84F5FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770318126, "uuid": "256da86a-1ce2-4b72-a30f-098b41e4ae29", "value": "6144:/43G0motY9mJkt8dkoFNTQe/AoszDe7pLgu9GcPfQ/4PFhq:Kh3UpCNse4oeDe7pL59GcMF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770318126, "uuid": "823d2917-6c88-462b-8f06-0dc375b4b4f7", "value": 247884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770318126, "uuid": "0cef6c65-f162-4a07-a7a0-248e23d46ede", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26dcbdbb-02c9-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770319838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770319838, "uuid": "c02b0235-62cd-406f-b32c-92e7d99831a2", "comment": "Malware payload (Mirai)", "value": "c76f7c816c989831f0b0e2827e685b7c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770319838, "uuid": "040a69b4-eb90-4ab1-9c8d-b61d77a6e638", "comment": "Malware payload (Mirai)", "value": "bdfe9de66ae3f0e71d05574445659c2c4409e1870259839185aee9ecd735ad0f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770319838, "uuid": "e010507f-15f2-4f96-9571-61b8e5c16d2c", "value": "T101E312749B7ABDEFE29A8D3171B0285A04F40D6D5F73A42278F3F55542CE8A008907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770319838, "uuid": "31a81b3f-1ecc-4a81-b383-aae66b5d1f5e", "value": "3072:pr3CbBjLic7hC85aSCcJewv+l3jio/Fy5QRXq6A2ZrZCbc:prSljx7/sBg+lGWJJXZrZwc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770319838, "uuid": "6f7ec1cb-5585-4b73-811e-0995a90eac43", "value": 143976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770319838, "uuid": "09ce36d0-b13d-4994-9ab9-09fef877646d", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770320834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770320834, "uuid": "e82256c7-033a-4a49-adf5-1dd29de7b297", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770320834, "uuid": "2561fd65-a2e7-4871-a492-c4e320b14159", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770320834, "uuid": "fdedba4f-44aa-430d-8c20-10d1ae365b5d", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770320834, "uuid": "172ed5f2-88f4-46ba-94c5-428351cf4480", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770320834, "uuid": "2cb3709f-e479-4375-a161-5bd3a918ca29", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5340f203-02cc-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770321201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770321201, "uuid": "58cd8b05-97b6-44a5-91b4-af613b25ad99", "comment": "Malware payload", "value": "33dc471a0df359c69964e8d6d36d6fa0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770321201, "uuid": "1f8dd89b-1efd-486a-91d5-9746338fbb60", "comment": "Malware payload", "value": "8aa79abe278f2d1b6d97b5a297db83a834e68678fa2072f90b4d11669284027a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770321201, "uuid": "20adf0f8-8c5b-41d7-92d7-5b2b7963b66a", "value": "T17ED50127F66264ACE56BC034478E81B2DB2AB46902267B3B7BD496303F38C655F1D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770321201, "uuid": "dc48aa8e-e19b-458b-bce0-0d42fed6c59c", "value": "49152:eED0nUUfDrm9TYWxFm5NNUgn1A5JUMt6oE5/p7SEi3+/xQaSk25s3nvLFvh4:eEWm9MYUvmMy5qUVkf3xQa52+3zFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770321201, "uuid": "c07b95c6-d44b-49b8-8a21-e90279d071c5", "value": 2765512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770321201, "uuid": "defc063e-4499-48ec-ad28-c0a7faed7a42", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8f80bda-02d5-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770325345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325345, "uuid": "a49b8f50-0882-4c42-bb72-9b4839143540", "comment": "Malware payload", "value": "787e1a4acf3a005b5ec82a72373aeae7", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325345, "uuid": "0218d63d-554b-4866-9f6e-a13cb3adcffe", "comment": "Malware payload", "value": "eb50483fc10b33ac01c2c174825c9562723555456b33ff4aecc63a5060704d65", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325345, "uuid": "9b80eb94-e73b-444f-b0f7-d31fe81164e3", "value": "T19107225BF344A8AAF8F383B285795361C1474C668B43D6C36D18323C19BB6D43F5AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325345, "uuid": "5a65618f-8f9b-472d-bfab-8b497ddf8704", "value": "393216:Ou8RnAwYIMn5xxXTEjjKkCGLVv+jlOtYeB6lpNxXKqDprqKVR:0ha/xDEjeq6lOtYeB6XN8ZKVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770325345, "uuid": "3766ca13-29be-4056-89dd-c8dd3407376b", "value": 18134139, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325345, "uuid": "8d84da70-683b-4afe-b11b-5d92ce650be9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "093d42dc-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770325372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325372, "uuid": "8787be27-b879-4466-916c-38cf7a36b2d2", "comment": "Malware payload", "value": "c42dbdbaa8337a2774d244edaa931464", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325372, "uuid": "93f26dd9-458f-4af2-b41c-ffff9170b6c3", "comment": "Malware payload", "value": "3e1337fbfc06e18c4f67bb40970b455b8b5f633482d3f478f5cc9e7f0ceab2ed", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325372, "uuid": "5e007e3f-7a1d-4172-9c52-bd36933100c4", "value": "T1B657238BF744A86AF4F393B245345765C14B4C668F43E7C76D18322C19B7AC82F4AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325372, "uuid": "7953b2e7-a467-4a1a-af59-daf4faea83ca", "value": "786432:lDepMOC/lZD6XNgK6lOtYelBocURNIg6gnOZj:lVFD//oSeofRNIqnOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770325372, "uuid": "fe09c2e0-ce3a-4b13-8aa8-30fd5252248e", "value": 28619408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325372, "uuid": "8a6faf3c-3a42-452e-8350-ed3e4a2bb18f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bcc38a1-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770325376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325376, "uuid": "5b160c09-ac2d-4f5d-a5ea-b457f6c07ed0", "comment": "Malware payload", "value": "ec0199b81d1b00f2d79f005e6a8e2f96", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325376, "uuid": "1505e82b-f973-44bf-902c-3817c6a98b8c", "comment": "Malware payload", "value": "aa6abb5c7f56caa9a90db8f318e6967349bb4cd1909c5e96348ece4bc4f80ce5", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325376, "uuid": "f6b3a8e9-d485-4af1-8ee0-c39bc7a82719", "value": "T18257235BF704A86AF4F393B2413A5366C1470C668B83D7C35D58327C18BBAD42F5AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325376, "uuid": "e9de7441-e630-42d4-8473-b50c46117556", "value": "786432:hJelMOC/ldj6XNK26lOtYePncrvM7KofOpBtS:hPpjtLoSePncrvM7PfkBU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770325376, "uuid": "e0cba925-24b9-47dc-95e4-23f32285f3cc", "value": 28619408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325376, "uuid": "9faf304b-92f2-4c44-9e6f-34f7f245c872", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dda6097-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770325568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325568, "uuid": "07eb6325-22fd-4d4d-9017-06a9184ede4b", "comment": "Malware payload", "value": "8386fff7b5e6e691ff7937af3f934e8b", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325568, "uuid": "3c62814b-70f8-4eb9-8f37-136934703b1b", "comment": "Malware payload", "value": "712c161d2f244a41354cc4073a7ccaba4167e7d95d8f4351f5453120c19e59c8", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325568, "uuid": "eeaffdd7-6084-4a51-a30d-490295221c38", "value": "T145E63379867735D5C4F0D6FE30EE8643C11B97B933354BBEAA2D08E4998A0A347726", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325568, "uuid": "cd0d6f1e-425d-4388-87cd-f6f260988c0e", "value": "393216:ymhRAEi12BloNaoPZi5sXkHgTQQhNB7+/2uEfX/7pv:pAL12BlGnPZaHoQ47i/2H/7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770325568, "uuid": "1aa36208-6f66-416a-b57a-73c7a385effd", "value": 15062717, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325568, "uuid": "d64501f5-e148-42b2-98a2-c23c503c0702", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02d6dfb8-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770326650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326650, "uuid": "c36b70bb-f2bb-49b4-b338-b4b10f7e0a1a", "comment": "Malware payload (Gafgyt)", "value": "8096643cb28771eac8c40be26cf07bbe", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326650, "uuid": "1bf80d19-e7db-4cf4-bd58-8fb8a566fda1", "comment": "Malware payload (Gafgyt)", "value": "8ad1cab84108ddae5f6c9f93fded9e17029bb9615668710e83924c12c7336c8c", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770326650, "uuid": "3b829e2c-b7bd-412f-8e00-0ac98101caa3", "value": "T1E0C3842E7E12BFBEE668863107F35F70879521D227A19382F26CD6181E7128D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770326650, "uuid": "6d148f8c-e21d-4d94-bbd5-3aa5cf051e06", "value": "1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeeEdWfRZrmW+IFj:Ted0W0MZQHAd6RZrmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770326650, "uuid": "38d364c6-5f41-4d53-86c4-03a30ba13e58", "value": 125962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770326650, "uuid": "4acb1e51-160c-4a74-9152-cdee4055b7d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07f16d80-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770326658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326658, "uuid": "b15217b0-5929-4126-967c-8c4f76354858", "comment": "Malware payload (Gafgyt)", "value": "36b305e0fd54405ec48042c45a6f7cb4", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326658, "uuid": "3e135431-842d-4552-b49c-ee41092bd5d3", "comment": "Malware payload (Gafgyt)", "value": "19a21f96ae3d3cd7fc0944aba895256186fe8867be4a7bc0f07152e09985eac6", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770326658, "uuid": "a90ff969-4a02-49c7-81bb-6d72aabb05ed", "value": "T1E7F34905E6408B57C1E2277AE6CF824D33338B94A3EB33155938ABF43FC27995E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770326658, "uuid": "60d67005-4fb4-4640-9804-06103fda0e0a", "value": "3072:T1g2/eINNlzx2kkQCMOaQcvBhYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/XYnydM/9MmFwfBxE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770326658, "uuid": "6891be6c-55fa-4fd1-b96e-5325637ec043", "value": 159888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770326658, "uuid": "de2dc88f-9728-4705-a715-b1911f800769", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46fd9694-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770332777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770332777, "uuid": "d63e7a54-807d-42aa-8071-4d4400c6e63f", "comment": "Malware payload (Mirai)", "value": "edfc22f9fa3ba8389aab63c9b135cde2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770332777, "uuid": "477a9d37-f80e-4a83-8166-cb58bd3726c0", "comment": "Malware payload (Mirai)", "value": "5ca2b47cc1b1ea9fb0eb8bb68cc6b9030e9bdd7575fa5cd490b8c0fa6e7e9b8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770332777, "uuid": "a337fd9e-dffc-48ad-82f5-529d1155b6e0", "value": "T123C2E1A3A4E98D05C863423B6E1F159B11386839134DEF1E363AEFEC63464B4A179D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770332777, "uuid": "3e6b0e12-3e6d-4760-bbab-bf9d00e7f500", "value": "384:MRSQ19WXUx5+bkbRaliVErjrL9VD9jPwrSaf5dwapDyCTYHHJC8oytPFnAqV/LlH:u5+Kcrb9VDJe5FLTYTlPFnz/sPF9slj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770332777, "uuid": "05b4013e-724e-4f8a-92b5-dd339abc6631", "value": 27704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770332777, "uuid": "00c64c76-b4c1-4177-b7e2-7ab2977ba31d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa67616b-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770333078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333078, "uuid": "e830c28f-f375-4f51-b54a-a749173a0ea3", "comment": "Malware payload (Mirai)", "value": "157e258e8ea2a510dc19ee4e5d77e1c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333078, "uuid": "cdc9f3ee-cc7a-411d-9842-cd1723c23fc0", "comment": "Malware payload (Mirai)", "value": "726921f004008043fb8c9d78dde13031e25ffdf7c2247d51b2c02e3cc48b59f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770333078, "uuid": "391606e7-4968-48f2-b42a-258f37cdbc44", "value": "T187732A26B97A1E26C0D4B57E60FB8B11F6E1278E26B4C50A7D720E5EEF147006502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770333078, "uuid": "60b6c1f8-78e6-436e-a5a1-ce6db91c3e92", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9WH:927jqCt8v3GI/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770333078, "uuid": "a99c17a2-a3ec-4254-b6ae-dc86d47f6879", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770333078, "uuid": "4bd8679a-0959-4925-92c2-cbbf7085bcc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770249734, "uuid": "ed5afb36-0225-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.117.179:56841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250218, "uuid": "0dbae3bb-0227-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.207.186:54013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250392, "uuid": "75d502f1-0227-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.27:56832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770250641, "uuid": "0a453998-0228-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.248.161.103/nuts/poop", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251294, "uuid": "8f5d592b-0229-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.200:39273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251594, "uuid": "41f7d2a3-022a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.65:46650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251777, "uuid": "aefcd3b1-022a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.249.146:58778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770251959, "uuid": "1bd2d548-022b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.248.135:38582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252251, "uuid": "c9a653bc-022b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.146:47718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252366, "uuid": "0e3c332b-022c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8468434805/fKDnWbX.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252374, "uuid": "1315641e-022c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.27:56832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252428, "uuid": "32ec1748-022c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.28.254:40007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252490, "uuid": "57e70979-022c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.152.219:48571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252554, "uuid": "7e871454-022c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.173.167:51082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770252730, "uuid": "e6dc7f37-022c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.200:39273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770253394, "uuid": "72c51c3e-022e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.248.135:38582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770253395, "uuid": "73c05768-022e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:47132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770253575, "uuid": "dece0246-022e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.47:50756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770253995, "uuid": "d9253dcd-022f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.173.167:51082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770254234, "uuid": "678b427a-0230-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.152.219:48571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770254773, "uuid": "a8cdea69-0231-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:47132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770255248, "uuid": "c411eece-0232-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.101.7:50661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770255553, "uuid": "79e5aa6e-0233-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.122:51146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770255844, "uuid": "27357366-0234-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/642848461/w8DMu38.ps1", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770255975, "uuid": "75478ba2-0234-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.47:50756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770256214, "uuid": "03ffbfa6-0235-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.185.93.188:44219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770257592, "uuid": "39185d0f-0238-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.236.3:45682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770257833, "uuid": "c8fdc024-0238-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.207.186:54013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770258132, "uuid": "7abc6aa6-0239-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.236.3:45682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770258146, "uuid": "832f86f6-0239-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.48.231:58751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770258802, "uuid": "0a757a43-023b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.196.147:38327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770259810, "uuid": "6325b3f6-023d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.222.8:43619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770259872, "uuid": "87ece3a3-023d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.105.169:45977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770259995, "uuid": "d191ba9e-023d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.26.12:57215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260474, "uuid": "eeb8e3e1-023e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.247.113.210:35240/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260474, "uuid": "eef19227-023e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.43:44163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260475, "uuid": "ef6a9a2e-023e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.222.8:43619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260475, "uuid": "ef84f687-023e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.220.137:48780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260475, "uuid": "ef8500c8-023e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.220.137:48780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260475, "uuid": "efb343f0-023e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.185.28:43020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260479, "uuid": "f203c8a9-023e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.158.197:32839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260533, "uuid": "11f6fe88-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.179.218:47759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260533, "uuid": "11fc11f3-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.255.62:47215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260534, "uuid": "12651126-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.173.1:45380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260534, "uuid": "12704edf-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.10.136:51189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260534, "uuid": "1292aefb-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.126.185:38830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260535, "uuid": "1341c8ca-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.194.31:40874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260587, "uuid": "32705e88-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.190:39487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260587, "uuid": "3286a168-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.25.243:49334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260587, "uuid": "32906c94-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.204.180:47167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770260588, "uuid": "32e2e6de-023f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.205.208.95:46727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770261132, "uuid": "7724d816-0240-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:59861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770261729, "uuid": "db237184-0241-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.43:44163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770261730, "uuid": "dbbb42e9-0241-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.26.12:57215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770261732, "uuid": "dcf0f9f1-0241-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:54854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770261916, "uuid": "4a7698bd-0242-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.134.199:44934/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770261916, "uuid": "4a7888f0-0242-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.244.198.245:20233/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770261921, "uuid": "4d943396-0242-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.175.84.43:32506/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770261969, "uuid": "69f30523-0242-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.163.41.199:48438/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770263058, "uuid": "f364c6d3-0244-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.245.32.27:41622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770263412, "uuid": "c60bfba3-0245-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:54854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770263596, "uuid": "3386a769-0246-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.222.19:48018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770264554, "uuid": "6ee155a6-0248-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.166.159:34894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770264727, "uuid": "d5bd7c1c-0248-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.210:41656/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770264916, "uuid": "4659b1fb-0249-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.61:48511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770265329, "uuid": "3c834e44-024a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.143.46:59907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266048, "uuid": "e9567cbf-024b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.210:41656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266117, "uuid": "125d318c-024c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.49:55110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266409, "uuid": "c0860869-024c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.166.159:34894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266709, "uuid": "731ef8fd-024d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.160.56.192/p.txt", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266711, "uuid": "746a9c3d-024d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.152.145.38:6218/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266714, "uuid": "768c0928-024d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.129.17.64:17858/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266777, "uuid": "9bf13b86-024d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.166.239:41644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770266827, "uuid": "b9815074-024d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.143.46:59907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770267135, "uuid": "7105e0be-024e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.139:48970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770267190, "uuid": "91d1714a-024e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.7.157.26:30892/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770267437, "uuid": "250aa57d-024f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.166.239:41644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770267557, "uuid": "6c701ad2-024f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.246.145:56493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770267610, "uuid": "8c84ad74-024f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.49:55110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770268093, "uuid": "abf927f2-0250-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.246:57101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770268632, "uuid": "edbf5b2c-0251-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.70.140:48604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770269115, "uuid": "0d293a43-0253-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.176.137.88:60249/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770269647, "uuid": "4abd3c4c-0254-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.246:57101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770270375, "uuid": "fc6872d6-0255-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.22.162:43391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770270615, "uuid": "8b46d00c-0256-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.70.140:48604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770271090, "uuid": "a69d29ca-0257-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.222.24:37645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770271339, "uuid": "3b20b8dc-0258-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.22.162:43391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770271934, "uuid": "9db99635-0259-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.222.24:37645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770272542, "uuid": "07e6938f-025b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.169:43881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770272598, "uuid": "29650a18-025b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.79.250:46774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273137, "uuid": "6aac6524-025c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.146.92.46:36795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273443, "uuid": "212577cb-025d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.169:43881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273727, "uuid": "ca80d591-025d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.71.167:40772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273790, "uuid": "f0060d8f-025d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/dy6a9cqng/image/upload/v1770082509/optimized_MSI_dkcy4m.jpg", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "triage", "colour": "#036740", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273791, "uuid": "f04b377f-025d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.238.167.200:28761/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273792, "uuid": "f0f4b854-025d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d24119tscml37u.cloudfront.net/app.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273909, "uuid": "36de4433-025e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://128.127.102.134:7554/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273910, "uuid": "374cfe04-025e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.165.39.103:48577/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770273921, "uuid": "3dfe0311-025e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.86.100.80:59172/.i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274207, "uuid": "e850c34a-025e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://wellnessmedcare.org/cz/Downloads/document.LnK", "Tag": [ { "name": "CVE-2026-21509", "colour": "#e3e437", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274579, "uuid": "c650ded8-025f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.230.180:45863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274642, "uuid": "ebd1ad51-025f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.142.242:42080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274688, "uuid": "071d1da9-0260-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.186.90.66:23093/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274871, "uuid": "740e1436-0260-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.199.73:56097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770274999, "uuid": "c0cccb46-0260-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://emierich.com/2p2o.js", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275064, "uuid": "e711efd1-0260-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.180.74:53932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275167, "uuid": "24ae3fe1-0261-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://powercat.dog/28954", "Tag": [ { "name": "Adwind", "colour": "#413d5c", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275357, "uuid": "962bcd1e-0261-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.59:45471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275408, "uuid": "b434c0ed-0261-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://retrodayaengineering.icu/LUK.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770275726, "uuid": "71e20e8a-0262-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.179.158:39684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770276253, "uuid": "abdbe51a-0263-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:37278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770276800, "uuid": "f245cb22-0264-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.199.73:56097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770277030, "uuid": "7b1bfb88-0265-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.56.147:43575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770277221, "uuid": "ecb7e5f6-0265-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.59:45471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770277284, "uuid": "12686fbf-0266-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.9.142:54451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770277459, "uuid": "7a89e3ed-0266-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.136.77:8000/bot.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770277460, "uuid": "7b239857-0266-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.239.105.190:55470/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770277816, "uuid": "4fd642e5-0267-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.123.248:45402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770278356, "uuid": "91810920-0268-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.56.147:43575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770278609, "uuid": "284e6d7e-0269-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.123.248:45402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770278609, "uuid": "2853f510-0269-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.2.55:42184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770278776, "uuid": "8bd987a4-0269-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.61.223:51998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770278963, "uuid": "fb46a7f0-0269-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.9.142:54451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770279079, "uuid": "405ace63-026a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.222.19:48018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770279847, "uuid": "0a1a821c-026c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6832239903/lrulllw.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770280046, "uuid": "809a3189-026c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.137.142:32825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770280701, "uuid": "074915e1-026e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.61.223:51998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770281430, "uuid": "b99e9c8c-026f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.76.21:45414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282009, "uuid": "13166b49-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://a6u344gi.galloverpower.digital/?=check&&actmn=BQhUvRNucJQlpbzJ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282072, "uuid": "388cb8c9-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.176.208.170/hiddenbin/boatnet.arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282073, "uuid": "38ba91b7-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.157.249:41503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282073, "uuid": "38e0e937-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.176.208.170/hiddenbin/boatnet.arm7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282144, "uuid": "6309cfd6-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.221:57039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282144, "uuid": "632ec301-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.169.118:37100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282144, "uuid": "63851cad-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.87.161:46807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282248, "uuid": "a158e166-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/eazybim.ps1", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282249, "uuid": "a1d41ceb-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/STEINSECONDD.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282249, "uuid": "a1ec480e-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/STEINN.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282249, "uuid": "a1ec4af7-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/MODE.ps1", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282249, "uuid": "a1ec6027-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/FAN.ps1", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282249, "uuid": "a1fbd3ca-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/aryaphan.ps1", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282249, "uuid": "a1fbd631-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/kkmk.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282249, "uuid": "a203d2c2-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/EAZYYYYY.ps1", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282249, "uuid": "a20b2222-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/DEB.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282250, "uuid": "a252d566-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/arya.ps1", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282250, "uuid": "a2682697-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/park.ps1", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282252, "uuid": "a3b102f7-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/ENCRYPTED.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282252, "uuid": "a3b3d601-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/grain.ps1", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282252, "uuid": "a3c3b3d5-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/arryaaaaaaaaa.ps1", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282253, "uuid": "a4028ba3-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/FFF.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282253, "uuid": "a42cb39c-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/YALLOWSISI.ps1", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282308, "uuid": "c4ef8d3b-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.90/WEB/STEINSECOND.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282369, "uuid": "e955e4d2-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.250.53:60633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282370, "uuid": "e9d1bca7-0271-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.222.255:55655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282922, "uuid": "33212078-0273-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.228.104:53936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282973, "uuid": "51366aab-0273-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.82.125:47694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770282973, "uuid": "51366f44-0273-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.21.71:43120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770283813, "uuid": "45f7abff-0275-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.157.249:41503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770283813, "uuid": "461d0883-0275-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.250.53:60633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770284418, "uuid": "aeb20b18-0276-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.173.32:48088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770284719, "uuid": "620d27be-0277-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.145.31:42699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770284828, "uuid": "a32c638d-0277-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.82.125:47694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770285017, "uuid": "13ed1730-0278-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.21.71:43120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770285140, "uuid": "5cbd1121-0278-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:55694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770285199, "uuid": "800c8ec2-0278-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.145.31:42699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770285380, "uuid": "ebfb359d-0278-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.22.117.42:55323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770285442, "uuid": "11099bcc-0279-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.136.63:46385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770285801, "uuid": "e6d66378-0279-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.30.141:34903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770285850, "uuid": "040dc1c1-027a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.173.32:48088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770286099, "uuid": "9855f925-027a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:33032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770286157, "uuid": "bb1964eb-027a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.64.250:41287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770286335, "uuid": "2520f0f2-027b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.101.38:43907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770286397, "uuid": "4a03f59c-027b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.101.38:43907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770286517, "uuid": "91f58952-027b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:55694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770287062, "uuid": "d667ef40-027c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.136.63:46385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770287067, "uuid": "d95d6185-027c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.140.121:35845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770287073, "uuid": "dd6336f3-027c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.238:44171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770287660, "uuid": "3ad47401-027e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:33032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770287892, "uuid": "c5831920-027e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.64.250:41287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770287893, "uuid": "c5f24c30-027e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.163.49:54004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770287893, "uuid": "c61e405a-027e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.77.234:57909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770288130, "uuid": "53447e79-027f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.225.122:53968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770288614, "uuid": "73be6b77-0280-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.140.32:45112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770288615, "uuid": "73fa421b-0280-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.238:44171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770288803, "uuid": "e4749038-0280-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.153.121:36984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770289630, "uuid": "d14ede28-0282-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.77.234:57909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770289818, "uuid": "413b4187-0283-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.48.231:58751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770290286, "uuid": "57f8b0e9-0284-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/keys53/c10ud/lopp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770290475, "uuid": "c9133b8d-0284-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.221.235:48832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291199, "uuid": "78a705f7-0286-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:59200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291370, "uuid": "de1c4ac0-0286-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.195:35556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291669, "uuid": "90c2f75e-0287-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/918797661/MT51cLB.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291795, "uuid": "db87a3e0-0287-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:60297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770291978, "uuid": "48f22e5b-0288-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.249.28.118:60132/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770292152, "uuid": "b06c19f2-0288-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.215.193.12:60124/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770292156, "uuid": "b2952448-0288-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/keys53/c10ud/grasp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770292173, "uuid": "bd13bdf2-0288-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.150.0.118/dewfhuewr4r89/98hy67/cc.txt", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770292173, "uuid": "bd227e90-0288-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.150.0.118/dewfhuewr4r89/98hy67//cc.txt", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293005, "uuid": "ad35d060-028a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.195:35556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293027, "uuid": "b9cc5db9-028a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.201.25:42119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293120, "uuid": "f1774981-028a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.228.104:53936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293303, "uuid": "5e8e51f1-028b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.66:41196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293303, "uuid": "5e96473c-028b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.66:41196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770293830, "uuid": "98868dc2-028c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.79.168:41516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770294011, "uuid": "04aa75ef-028d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7103746036/ssivTBS.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770294622, "uuid": "70d9e2b0-028e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.221.235:48832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770295578, "uuid": "aa6f65a1-0290-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.79.5:46897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770295694, "uuid": "ef8d1e8c-0290-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.242.46:59838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770296413, "uuid": "9c3aa000-0292-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7103746036/o9hkwIZ.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297081, "uuid": "2a731925-0294-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.79.168:41516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297188, "uuid": "69eafc53-0294-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bland3h/d3d9/-/raw/main/14U0GQ0YKP57.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297214, "uuid": "79ba2d2a-0294-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.74.115:37815/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770297819, "uuid": "e270dcc3-0295-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.20.235:43054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298086, "uuid": "818d222b-0296-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6719008056/LR0D6Rm.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298583, "uuid": "a9d43fc4-0297-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.244.111:38221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770298819, "uuid": "360d8799-0298-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.221:57039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770299249, "uuid": "36ec2d79-0299-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.143.169:35901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770299359, "uuid": "781b432f-0299-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.20.235:43054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770299838, "uuid": "9579bfef-029a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.238.147:51649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770300430, "uuid": "f6947774-029b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6951863039/XcnPbsV.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770300627, "uuid": "6c1acaab-029c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.143.169:35901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770300734, "uuid": "abdc7448-029c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.179.87:42792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770301398, "uuid": "37680dda-029e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.238.147:51649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770301525, "uuid": "83072e18-029e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.12.108:45300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770301806, "uuid": "2abae4aa-029f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.201.200:8082/download", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770302825, "uuid": "8a09a9e3-02a1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/stp26det/encrypted/trx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770303308, "uuid": "aa1b2b07-02a2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:58392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770303426, "uuid": "f06e839a-02a2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/837705322/3AzCaEe.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770303865, "uuid": "f5e3702e-02a3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.194.74:42082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770304878, "uuid": "51e0e049-02a6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.223.162:46793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770304901, "uuid": "5f42327e-02a6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.150.99:41799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770305077, "uuid": "c81d02a2-02a6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.223.80:36595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770305349, "uuid": "6ac97ffa-02a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://scorpcasinos.com/7/Output.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770305361, "uuid": "71b6720b-02a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.194.74:42082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770305723, "uuid": "49407782-02a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.163.250:45617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770305953, "uuid": "d28e2ebb-02a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.114.167:53840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306205, "uuid": "68a47570-02a9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.150.99:41799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306377, "uuid": "cf5f5752-02a9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.223.80:36595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306667, "uuid": "7bd578f7-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://spacetech.co.in/zoom/ZoomWorkspaceinstallersetup.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306668, "uuid": "7cb04d9b-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.27:33460/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306668, "uuid": "7ccd613b-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-e0f31498c93c4562973d8295141e23d0.r2.dev/Docx_xlx_2026.vbs", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306668, "uuid": "7cda8550-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.38.63/csk_ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306669, "uuid": "7d170df0-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.230.61:40249/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306669, "uuid": "7d1767ec-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.183.182.179/systemctl/bin.armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306670, "uuid": "7daa1c9f-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://groomingmfb.com/download-the-latest-acrobat-free-pdf-pro-version-download.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306680, "uuid": "83bb9b33-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rezoc.fun/files/AutoSend_v1.3.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306681, "uuid": "848b54f8-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vrajras.com/MicrosoftTeamUpdate.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306681, "uuid": "8496f38f-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sampaworks.info/zoom/ZoomWorkspaceinstallersetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306681, "uuid": "84bb969b-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://newupdate.top/zoom/Windows/ZoomWorkspace.ClientSetup.scr", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306682, "uuid": "85170de3-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dnscdn.top/SafeWInstaller_x64.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306683, "uuid": "85b0a584-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://surel.sbs/Windows/download.php", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306727, "uuid": "9fc7f978-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.xt24.com/install/re42.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770306799, "uuid": "cafa2c5a-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.132.251:37906/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307701, "uuid": "e4889f37-02ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.163.250:45617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307937, "uuid": "71418272-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.130.248.85:25600/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307938, "uuid": "71accbfb-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.70.248.228:18030/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307939, "uuid": "720740e8-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.148.95.248:59812/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307940, "uuid": "72e9d586-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.30.46.118:42754/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307940, "uuid": "72ee8069-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.169.212.91:14618/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307941, "uuid": "738d534c-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.113.149.57:17437/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307941, "uuid": "73952a08-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.100.245.105:28912/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307945, "uuid": "75913922-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.247.148.41:17271/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307945, "uuid": "759c0360-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.182.189.250:37888/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307995, "uuid": "93a947db-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.91.236.237:10713/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770307995, "uuid": "93acaa36-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://184.185.30.182:29029/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308005, "uuid": "995bdf50-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.101.11.9:19080/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308005, "uuid": "99a65c27-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.61.41.20:62853/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308006, "uuid": "99ffefd0-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.77.214.242:60141/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308006, "uuid": "9a1ce60a-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.188.76.28:49130/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308006, "uuid": "9a3b04e6-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.199.254.48:1790/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308006, "uuid": "9a558da3-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.6.203:8907/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308006, "uuid": "9a5c5917-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.50.186.147:24408/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308006, "uuid": "9a63d520-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.220.234.5:53133/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308007, "uuid": "9aa31204-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.162.188.251:22850/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308007, "uuid": "9aad3673-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.193.191.71:8295/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308007, "uuid": "9ab0546e-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.74.102.47:38766/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308007, "uuid": "9abdb4cf-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.152.145.7:53591/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308007, "uuid": "9aeccd60-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.62.40.139:39993/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308007, "uuid": "9afee6f8-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.17.81.123:27215/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308062, "uuid": "bb818942-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.46.170.18:53326/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308063, "uuid": "bc776f59-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.40.194.39:59353/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308065, "uuid": "bd25f6f8-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.176.217.154:24040/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308066, "uuid": "be446c5f-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.228.163.150:60925/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308073, "uuid": "c2699211-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.220.86.255:34341/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308113, "uuid": "d9fef296-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.5.194.56:43416/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308119, "uuid": "dd508162-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.12.161.225:4079/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308181, "uuid": "0251b3fb-02ae-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.189.155:35111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308777, "uuid": "65c63b95-02af-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.12.212:53448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308903, "uuid": "b0b0bed9-02af-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.132.251:37906/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770308963, "uuid": "d4cbdcbc-02af-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.99.117:59319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770309498, "uuid": "13a09d40-02b1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.194.31:40874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770310217, "uuid": "bfe18842-02b2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.189.155:35111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770310507, "uuid": "6d31b35e-02b3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.224.140.178:31291/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770310824, "uuid": "2a059112-02b4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.74.195.77:42999/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770310825, "uuid": "2a7a05d5-02b4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.96.193.14:19727/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770310831, "uuid": "2dc9625b-02b4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.123.72:41575/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770310833, "uuid": "2f2fed7d-02b4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.220.28.184:35037/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770310877, "uuid": "495431d3-02b4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.99.117:59319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770311238, "uuid": "20813cd9-02b5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.13.62:56220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770311549, "uuid": "d9d3b04f-02b5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.217.119:36682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770311767, "uuid": "5c2c0be8-02b6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.157.205:34257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770312616, "uuid": "5619e27a-02b8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.7.77:35489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770312676, "uuid": "79ccd88a-02b8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.131:54734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770312677, "uuid": "7a1b4a6b-02b8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.227.251:54448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313276, "uuid": "df8b534b-02b9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.157.205:34257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313341, "uuid": "066394ec-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.248.117:47600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313452, "uuid": "480d0da1-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.168.48/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313452, "uuid": "48220479-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.132.111.230/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313452, "uuid": "484e5f32-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.39.143.113:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313457, "uuid": "4b12e71b-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.132.112.17/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313458, "uuid": "4bc908f9-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.41.145.132:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313458, "uuid": "4bcc2c64-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.46.94:2001/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313459, "uuid": "4c3877c4-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.41.145.132:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313459, "uuid": "4c8da20a-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.46.201:2001/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313460, "uuid": "4d3b47cd-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.152:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313460, "uuid": "4d4d5ce0-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.94.196:2003/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313461, "uuid": "4d6825c4-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.77.253:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313461, "uuid": "4d6a09de-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.72.198:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313461, "uuid": "4de3e036-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.46.229:2001/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313462, "uuid": "4dfce708-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.168.32.118:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313463, "uuid": "4ed00a8d-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.19.39.187/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313465, "uuid": "4ffc8e4d-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.165.26.78/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313470, "uuid": "53024e6f-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.19.33.211/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313510, "uuid": "6b13b795-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.11.73.208:43524/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313510, "uuid": "6b247ddf-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.162.58.69:51909/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313511, "uuid": "6b710a9f-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.0.121.1:39119/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313511, "uuid": "6b8668fd-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.172.96.84:3012/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313513, "uuid": "6cb3e96f-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.0.121.130:39119/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313514, "uuid": "6d678c86-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.40.106.22:1025/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313523, "uuid": "72697c53-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.244.47.211:24954/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313523, "uuid": "72d5d52c-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.32.224.7:1350/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313524, "uuid": "73586be5-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.152:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313524, "uuid": "736146a8-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.32.224.7:55381/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313524, "uuid": "73615797-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.134.223.69:11803/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313525, "uuid": "73bef654-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.210.92.110:7115/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313525, "uuid": "73c10482-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.152:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313525, "uuid": "740ab690-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.152:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313526, "uuid": "741dc935-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.78.23.203:1723/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313568, "uuid": "8d6d86e6-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.140.176.79:12124/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313635, "uuid": "b594cbbe-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.217.119:36682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313746, "uuid": "f7b0b347-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7598745812/ACWEBaQ.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770313876, "uuid": "44e15165-02bb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.7.77:35489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770314424, "uuid": "8b631644-02bc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.124.231:58875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770314963, "uuid": "ccd7ff08-02bd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.124.33.87:60147/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315081, "uuid": "13364148-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.248.117:47600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315082, "uuid": "138984cf-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.175.128:50474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315203, "uuid": "5bad5c46-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.237.77.26:60126/linux", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315203, "uuid": "5c2e68bb-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.242.142.111:60100/linux", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315204, "uuid": "5c4bb6b8-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.242.47.14:60127/linux", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315212, "uuid": "61607a07-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.83.202.230:60106/linux", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315213, "uuid": "619e4b1c-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.167.238.38:8020/linux", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315260, "uuid": "7dd16737-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.9.111:43788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315438, "uuid": "e83e37fc-02be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.124.231:58875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770315565, "uuid": "33bed46f-02bf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.79.250:46774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770316100, "uuid": "7255a49e-02c0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.175.128:50474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770316628, "uuid": "ad52a43b-02c1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/3LyATKu.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770316699, "uuid": "d7daca79-02c1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.9.111:43788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770317179, "uuid": "f5995c00-02c2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:47004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770317483, "uuid": "aab79902-02c3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.88.137.98:40177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770317721, "uuid": "38fe6bf6-02c4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.26:60976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770317778, "uuid": "5a98730c-02c4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.95.49:49573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770318250, "uuid": "7443afeb-02c5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.116:45379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770318380, "uuid": "c19d40e0-02c5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.199.236:33539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770318508, "uuid": "0e1c951d-02c6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.26:60976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770318558, "uuid": "2ba1f104-02c6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:47004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770318976, "uuid": "250645fb-02c7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.88.137.98:40177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770318988, "uuid": "2c0b0d7f-02c7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.192.7:51076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770319099, "uuid": "6e36790b-02c7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.233.96:42593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770320052, "uuid": "a6194a4b-02c9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.112.53:43106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770320117, "uuid": "cd34b781-02c9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.199.236:33539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770320355, "uuid": "5b115752-02ca-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.45:41827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770320656, "uuid": "0e426287-02cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.116:45379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770320835, "uuid": "78b137b3-02cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.234.70:43238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770321131, "uuid": "2935c797-02cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.12.108:45300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770321131, "uuid": "29469612-02cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.122:51146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770321202, "uuid": "53899bb8-02cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.186.25.120/bot", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770321260, "uuid": "75feab74-02cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.2:52888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770321856, "uuid": "d974aa86-02cd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.171:46357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770322147, "uuid": "86b8a8b6-02ce-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uljt1y53.inspirpatience.digital/?=check&&actmn=ZUqluZwGngHogjfO", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770322220, "uuid": "b297c759-02ce-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.218:47742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770322517, "uuid": "63b572d4-02cf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.112.53:43106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770322518, "uuid": "644e4e10-02cf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.149.207:44398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770322630, "uuid": "a688b8fd-02cf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.234.70:43238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770323168, "uuid": "e79ee2a1-02d0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.10.136:51189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770323295, "uuid": "3311c593-02d1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.60:48297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770323418, "uuid": "7cb3c5d4-02d1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.218:47742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770323539, "uuid": "c49cc73c-02d1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.152.139:35443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770323599, "uuid": "e89d38b3-02d1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.90.40:59564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770323836, "uuid": "75e64670-02d2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:43314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324128, "uuid": "23d0561c-02d3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.2.69:41519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324668, "uuid": "6562d8f9-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.99.184/bins/build.arm64", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324668, "uuid": "65b8cd85-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.99.184/bins/build.arm", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324668, "uuid": "65ba0522-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.99.184/bins/build.64", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324669, "uuid": "666654a8-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.99.184/bins/build.32", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab4a5490-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/linux_amd64", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab4e4b82-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/linux_aarch64", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab4e8d0b-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/download.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab502368-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/linux_arm6", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab52c695-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/linux_mipsel", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab5634cb-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/linux_386", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab5691c5-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/linux_mips", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab65e7be-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/linux_arm5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770324785, "uuid": "ab745b09-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.217.36.58/linux_arm7", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325218, "uuid": "ad51b390-02d5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:43314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325335, "uuid": "f33f5d27-02d5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/VPN.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325339, "uuid": "f55c9ec8-02d5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/kuqmfetegv.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325345, "uuid": "f909430f-02d5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/test.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325356, "uuid": "ff70f74b-02d5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/8dg483p2w8.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325363, "uuid": "03a5e05d-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/75apgbxeel.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325374, "uuid": "0a34ff7a-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/nlbob6zz9p.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325375, "uuid": "0b3b597c-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/tuterjhhab.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325376, "uuid": "0b97ad03-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/88c823p9ai.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325376, "uuid": "0bd2fac9-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/xs9vctfb2o.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325377, "uuid": "0c178bac-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.10.161.71/26ayh5qow3.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325397, "uuid": "18365c00-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.156.246:35243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325515, "uuid": "5e850b03-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.34.72:43760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325568, "uuid": "7e231b07-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.32.110.136:32672/bazoka.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325700, "uuid": "ccb3bcf4-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.2.69:41519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770325755, "uuid": "edacd002-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.60:48297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326648, "uuid": "0195ec1e-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/a-r.m-4.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326650, "uuid": "02e02bc0-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/m-i.p-s.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326658, "uuid": "07cd5594-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/p-p.c-.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326658, "uuid": "07f1e0f4-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/x-8.6-.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326658, "uuid": "07f1e180-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/s-h.4-.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326659, "uuid": "07fd7175-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/m-6.8-k.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326659, "uuid": "07fd82f5-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/Sakura.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326659, "uuid": "07fd9b00-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/i-5.8-6.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326659, "uuid": "07fd9dd7-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/a-r.m-7.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326659, "uuid": "07fdb710-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/a-r.m-5.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326659, "uuid": "07fe81e2-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/m-p.s-l.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326659, "uuid": "08043993-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.112.70/x-3.2-.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770326775, "uuid": "4d6f9390-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.47.199:47005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "fece3eb8-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "fecf1b90-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "fed0a229-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "feed61ee-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "feed9e42-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "feedbcc8-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "feeec960-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "fef05cae-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "fefae194-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff01a476-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff0f11d4-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff19732c-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff341350-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff371887-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff37bdbc-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff3b2859-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff3e96dc-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff42756b-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff435283-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff453cb9-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff4542e5-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff475bea-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff49351f-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff4a8218-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff4abd6a-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff4c2ad5-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff4d8de0-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff4dff60-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff4e0503-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff4fadb8-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327073, "uuid": "ff50c485-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327074, "uuid": "ff54b8bf-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327074, "uuid": "ff578135-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327074, "uuid": "ff5dd96a-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327074, "uuid": "ff68c493-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "00020f83-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.60/hiddenbin/Space.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "0005d054-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/debug", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "00122ad6-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "0016f207-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "00200bac-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "00201af8-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "002fc2c3-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "0067a3fd-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770327075, "uuid": "006d934f-02da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.210/00101010101001/morte.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770328037, "uuid": "3d739907-02dc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.27:33460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770328037, "uuid": "3dde3d24-02dc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.132.140:48443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770328040, "uuid": "3f8a2fbd-02dc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://connecthost.live/00101010101001/morte.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770329168, "uuid": "dff2facb-02de-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.176:50130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770329295, "uuid": "2b65d833-02df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.132.140:48443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770329296, "uuid": "2bff916e-02df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.20.244:48349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770329778, "uuid": "4b7fb242-02e0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.34.72:43760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770330559, "uuid": "1c9ca32b-02e2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.44.87:60388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770330619, "uuid": "4067ba12-02e2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:48352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331272, "uuid": "c5b10b47-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.157.61:25154/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331272, "uuid": "c5dbfafd-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.27.211.107:63655/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331272, "uuid": "c5fb9468-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.239.20.75:16958/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331274, "uuid": "c6be5d0d-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.19.148.15:10610/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331274, "uuid": "c6be69f4-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.102.22.212:54970/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331274, "uuid": "c6ca4885-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.1.110.226:13619/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331274, "uuid": "c6fa00b1-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.190.234.214:44043/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331274, "uuid": "c717632e-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.252.73.242:34243/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331274, "uuid": "c740745d-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.99.112.46:37912/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331274, "uuid": "c7432145-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.240.203.39:12679/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331277, "uuid": "c88689db-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.16.163.49:50189/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331277, "uuid": "c898f49f-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.237.167.106:30071/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331278, "uuid": "c9a36f90-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.77.134.51:47478/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331284, "uuid": "cd4257c2-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.70.156.70:43412/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331304, "uuid": "d8de4a6b-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.24.150.181:31328/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331331, "uuid": "e8de653c-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://50.43.160.231:38064/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331332, "uuid": "e9624032-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.52.110.24:65526/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331332, "uuid": "e9624086-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.196.120.21:24227/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331332, "uuid": "e9aa428c-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://131.255.176.69:26920/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331332, "uuid": "e9c6f231-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.103.251.153:25436/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331332, "uuid": "e9df9604-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.99.251.73:16822/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331332, "uuid": "e9df9bdd-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.73.255.5:27419/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331333, "uuid": "ea19fc45-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.71.74.201:42043/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331354, "uuid": "f6b6fd10-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.183.110.200:32060/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770331992, "uuid": "731e5044-02e5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.157:37622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770332420, "uuid": "72317859-02e6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.207.187:35679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770332778, "uuid": "4730a9b1-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.80/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770332850, "uuid": "7278d010-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.204.217.174/k", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770332958, "uuid": "b2ab3579-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.35.166:47080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333014, "uuid": "d466d61c-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:48352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333075, "uuid": "f84d2247-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.80/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333078, "uuid": "fa6ca0aa-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.80/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333078, "uuid": "fa6caa5f-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.80/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333078, "uuid": "fa72a8f9-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.80/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333078, "uuid": "fa72c35b-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.80/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333078, "uuid": "fa7372f2-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.80/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770333078, "uuid": "fa8df9c2-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.80/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770334388, "uuid": "075109cd-02eb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.49:38247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770334449, "uuid": "2b579c1f-02eb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:58392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770334465, "uuid": "351c09f1-02eb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.167:56294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770334697, "uuid": "bf1fe103-02eb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.207.187:35679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770334752, "uuid": "e0047fc1-02eb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.35.166:47080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770335599, "uuid": "d922ef94-02ed-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.22.174.88/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770335600, "uuid": "d944a458-02ed-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.22.174.88/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770335600, "uuid": "d965a0bf-02ed-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.22.174.88/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770335604, "uuid": "dbf43a36-02ed-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.22.174.88/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770335604, "uuid": "dc0e112a-02ed-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.22.174.88/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770335825, "uuid": "5f729e18-02ee-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.173/load/subprocess.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4394b99c-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.168.32.118", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7ac44d45-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.116.38.63", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308105, "uuid": "d5107f7b-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.12.161.225", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307924, "uuid": "6989347c-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.182.189.250", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770310806, "uuid": "1edb5659-02b4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.220.28.184", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16db268-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.111.157.61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d474804-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.199.254.48", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250625, "uuid": "00b7d2d9-0228-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.248.161.103", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770322206, "uuid": "aa310d62-02ce-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.11.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252244, "uuid": "c54e58cc-022b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.39.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770264724, "uuid": "d40363e6-0248-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.89.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331985, "uuid": "6ea90351-02e5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.198.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c169be0b-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.77.134.51", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770314944, "uuid": "c1d8cf5e-02bd-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.124.33.87", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770292985, "uuid": "a14688a0-028a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.201.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4393171a-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.165.26.78", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291965, "uuid": "41071864-0288-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.215.193.12", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260584, "uuid": "3098aad4-023f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.148.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770263584, "uuid": "2c680e6d-0246-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.222.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770290464, "uuid": "c27c8f97-0284-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.221.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282064, "uuid": "33c7b659-0271-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.157.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260524, "uuid": "0cb4cbdf-023f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.173.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770268624, "uuid": "e8c1a98f-0251-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.70.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770301509, "uuid": "796640cc-029e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.12.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770322505, "uuid": "5c3f7f69-02cf-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.149.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770328025, "uuid": "366c6c86-02dc-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.132.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770284706, "uuid": "5a2fa64a-0277-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.145.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260465, "uuid": "e94a9cb9-023e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.185.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770287045, "uuid": "cc7ab030-027c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.165.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4394c6db-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.46.201", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4394caa5-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.46.229", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "43930b17-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.46.94", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770334444, "uuid": "28650c63-02eb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282965, "uuid": "4c86202c-0273-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.251.21.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770311524, "uuid": "cb4b3010-02b5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.217.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770285424, "uuid": "063d0119-0279-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.136.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770298565, "uuid": "9eca27d6-0297-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.244.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770324124, "uuid": "2102c510-02d3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.183.2.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251284, "uuid": "8942e4b1-0229-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.242.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770318964, "uuid": "1ded5478-02c7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.192.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770330605, "uuid": "386130c4-02e2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.28.199.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770320824, "uuid": "729c90a7-02cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.234.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770317465, "uuid": "a06a4761-02c3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.88.137.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260584, "uuid": "3098cb3f-023f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.205.208.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770305705, "uuid": "3e89f824-02a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.163.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266765, "uuid": "945c5dcf-024d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.166.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770287885, "uuid": "c13b2fdc-027e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.77.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770281406, "uuid": "ab5a896f-026f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.76.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297784, "uuid": "cd8b5e62-0295-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.20.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "439907fd-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.19.33.211", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "43934382-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.19.39.187", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770288125, "uuid": "50124341-027f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.225.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4398e3e6-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.72.198", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4393df02-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.77.253", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770263044, "uuid": "eaf2042d-0244-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.245.32.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260465, "uuid": "e94a990a-023e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.158.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770329284, "uuid": "25089820-02df-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.20.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282364, "uuid": "e6462937-0271-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.222.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770304865, "uuid": "4a52a054-02a6-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.223.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260584, "uuid": "30989655-023f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.25.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315184, "uuid": "50d62e63-02be-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.167.238.38", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770312605, "uuid": "4f84acbc-02b8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.7.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770270365, "uuid": "f652e074-0255-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.22.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770330544, "uuid": "13d47761-02e2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.44.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260524, "uuid": "0cb52d4a-023f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.194.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308045, "uuid": "b1587440-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "136.228.163.150", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d480bb7-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "149.50.186.147", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16a207e-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.252.73.242", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d46e216-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "167.62.40.139", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313506, "uuid": "68afee80-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.0.121.1", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313506, "uuid": "68b13ec5-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.0.121.130", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307924, "uuid": "6988953a-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.247.148.41", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770288784, "uuid": "d8fb35ee-0280-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.153.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282905, "uuid": "28e922d5-0273-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.228.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d46d1c7-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.193.191.71", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770261905, "uuid": "43f856c9-0242-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.163.41.199", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d47e40e-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.74.102.47", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307924, "uuid": "698850ea-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.113.149.57", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7ac5afdb-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.191.230.61", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260524, "uuid": "0cb50744-023f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.10.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282125, "uuid": "57d915cc-0271-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.87.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770318365, "uuid": "b8998448-02c5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.199.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770277265, "uuid": "06f3a6eb-0266-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.9.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260584, "uuid": "3098eda7-023f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.204.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770287885, "uuid": "c13b4802-027e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.163.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770250205, "uuid": "061bba2b-0227-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.207.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770319085, "uuid": "65a32163-02c7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.233.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770299824, "uuid": "8d906830-029a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.238.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282965, "uuid": "4c85ff25-0273-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.82.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770287045, "uuid": "cc7ab48c-027c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.140.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770321184, "uuid": "4909e5ad-02cc-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.186.25.120", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16d239e-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.27.211.107", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307924, "uuid": "6988344e-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.30.46.118", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266705, "uuid": "70e3bbf0-024d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.152.145.38", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770261905, "uuid": "43f89aee-0242-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.244.198.245", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274685, "uuid": "0540a63f-0260-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.186.90.66", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770327064, "uuid": "f9e8e3a7-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.210", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770327064, "uuid": "f9e85378-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.60", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313565, "uuid": "8bb5b595-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.140.176.79", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313506, "uuid": "68af754c-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.210.92.110", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "439421ed-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.39.143.113", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331324, "uuid": "e5073a0d-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.183.110.200", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770310505, "uuid": "6bf6c7f1-02b3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.224.140.178", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16ca28e-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.99.112.46", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331324, "uuid": "e507599c-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.99.251.73", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331324, "uuid": "e506fe15-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.71.74.201", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770269105, "uuid": "079a29ab-0253-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.176.137.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770325564, "uuid": "7b5dd159-02d6-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.32.110.136", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16d1145-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.24.150.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770252484, "uuid": "54c56575-022c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.152.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770284406, "uuid": "a737d56b-0276-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.173.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770267544, "uuid": "6530ab6c-024f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.246.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266106, "uuid": "0bdd6b30-024c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.91.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308165, "uuid": "f8d3ee6b-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.189.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313506, "uuid": "68b0e2b3-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.162.58.69", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315066, "uuid": "0a03698d-02be-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.175.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770323524, "uuid": "bbede55a-02d1-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.152.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770293825, "uuid": "95849561-028c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.79.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770251944, "uuid": "12b72aff-022b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.248.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770266705, "uuid": "70e6a527-024d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.160.56.192", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770291965, "uuid": "4106ff74-0288-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.249.28.118", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770285364, "uuid": "e2a06fcc-0278-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.22.117.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331324, "uuid": "e507188b-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.73.255.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306785, "uuid": "c22e5b68-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.132.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275705, "uuid": "657ab971-0262-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.179.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307924, "uuid": "698858a7-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.100.245.105", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4394c4cc-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.14.152", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273786, "uuid": "ed6f91c8-025d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.238.167.200", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770311225, "uuid": "18b14ea4-02b5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.13.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770304865, "uuid": "4a52a02b-02a6-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.150.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770285785, "uuid": "dd8643c2-0279-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.30.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770332406, "uuid": "69916b8a-02e6-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.207.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770329164, "uuid": "dda35e11-02de-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.70.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770293285, "uuid": "539c39a2-028b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.70.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770332944, "uuid": "aa7f52c6-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.35.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282125, "uuid": "57d912e2-0271-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.169.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770257585, "uuid": "34bbde61-0238-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.236.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770317705, "uuid": "2f8757af-02c4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.107.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770258124, "uuid": "76189bad-0239-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.48.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770255544, "uuid": "744d4760-0233-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.191.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770280025, "uuid": "74079578-026c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.243.137.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770299224, "uuid": "27ab2f4f-0299-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.143.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770265325, "uuid": "3a5fc952-024a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.143.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770301805, "uuid": "2a5b9d14-029f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.137.201.200", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770324665, "uuid": "63a1aa7c-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.137.99.184", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770326645, "uuid": "ffbf725a-02d8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.101.112.70", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308045, "uuid": "b157f288-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.176.217.154", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315184, "uuid": "50d6151e-02be-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.237.77.26", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315184, "uuid": "50d63469-02be-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.242.142.111", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315184, "uuid": "50d62981-02be-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.242.47.14", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770315184, "uuid": "50d63f95-02be-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.83.202.230", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313506, "uuid": "68b0f0f9-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.11.73.208", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d4782ef-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.152.145.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273905, "uuid": "34b6ea0e-025e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.165.39.103", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16ce754-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.237.167.106", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d47ce9c-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.77.214.242", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770326765, "uuid": "474a0d31-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.47.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "439c3122-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.94.196", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770310806, "uuid": "1edb7d2e-02b4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.123.72", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770321844, "uuid": "d2309121-02cd-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.245.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770264544, "uuid": "68e13e55-0248-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.166.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770297185, "uuid": "6832bbc5-0294-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.74.115", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770305047, "uuid": "b6715056-02a6-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.223.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770321244, "uuid": "6cac98f0-02cc-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.235.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331324, "uuid": "e50748bd-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.52.110.24", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770271084, "uuid": "a33c80d3-0257-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.222.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770277025, "uuid": "77ea03d8-0265-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.56.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770260524, "uuid": "0cb4f4db-023f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.126.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770272525, "uuid": "fda783f2-025a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.95.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282064, "uuid": "33c7c96f-0271-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.176.208.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770332764, "uuid": "3f2a4de5-02e7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.160.80", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770312664, "uuid": "72a0b8a8-02b8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.92.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4394d510-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.132.111.230", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "43948328-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.132.112.17", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307924, "uuid": "69882582-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.70.248.228", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313506, "uuid": "68b0cb2d-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.172.96.84", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770324784, "uuid": "aae4cd89-02d4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.217.36.58", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313506, "uuid": "68b0ee63-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.40.106.22", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770308045, "uuid": "b158624c-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.40.194.39", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770335584, "uuid": "cfe694d6-02ed-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.22.174.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307924, "uuid": "6988b420-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.148.95.248", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16cc220-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.102.22.212", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d47496f-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.61.41.20", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16a277e-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.240.203.39", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "439d726a-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.168.48", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c16b0fcd-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.16.163.49", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d46bd66-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.17.81.123", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770331265, "uuid": "c1698f9a-02e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.19.148.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770313444, "uuid": "4395e116-02ba-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.41.145.132", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273905, "uuid": "34b717b9-025e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.86.100.80", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7ac369c4-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.183.182.179", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307984, "uuid": "8d46f6e0-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.188.76.28", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770307924, "uuid": "6988574b-02ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.169.212.91", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282007, "uuid": "11e54723-0271-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "a6u344gi.galloverpower.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770282244, "uuid": "9f19441e-0271-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-na-phx-3.gofile.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770327065, "uuid": "fa17db52-02d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "connecthost.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770273786, "uuid": "ed857879-025d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d24119tscml37u.cloudfront.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7aff6e26-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dnscdn.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7ad7d7f8-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "groomingmfb.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306666, "uuid": "7b4fcfeb-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "newupdate.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770275165, "uuid": "237fc8ca-0261-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "powercat.dog" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7adbc29c-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-e0f31498c93c4562973d8295141e23d0.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7aec3eb4-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rezoc.fun" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7af4fe08-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sampaworks.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770305345, "uuid": "67f64c20-02a7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scorpcasinos.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7b102be0-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "spacetech.co.in" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7ada4134-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "surel.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770322144, "uuid": "8564c01a-02ce-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uljt1y53.inspirpatience.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306666, "uuid": "7b5d34c9-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vrajras.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770274205, "uuid": "e785e451-025e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wellnessmedcare.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770306665, "uuid": "7ad3384a-02aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.xt24.com" } ] } }